AWS devopsagent documentation change
Summary
Fixed indentation and whitespace in JSON policy documents and CLI command examples throughout the onboarding guide. Corrected a URL by replacing a non-breaking space with a regular space. No content changes were made to policies or commands.
Security assessment
The changes exclusively involve formatting improvements without modifying any security-related content. The policy definitions, permissions, and authentication mechanisms remain unchanged. The URL correction ensures proper accessibility but doesn't address a security vulnerability.
Diff
diff --git a/devopsagent/latest/userguide/getting-started-with-aws-devops-agent-cli-onboarding-guide.md b/devopsagent/latest/userguide/getting-started-with-aws-devops-agent-cli-onboarding-guide.md index 3961d0d57..98658368a 100644 --- a//devopsagent/latest/userguide/getting-started-with-aws-devops-agent-cli-onboarding-guide.md +++ b//devopsagent/latest/userguide/getting-started-with-aws-devops-agent-cli-onboarding-guide.md @@ -35 +35 @@ Download the AWS DevOps Agent model file: - # Download from: https://d1co8nkiwcta1g.cloudfront.net/devopsagent.json + # Download from: https://d1co8nkiwcta1g.cloudfront.net/devopsagent.json @@ -61,18 +61,18 @@ Create the AWS Identity and Access Management (IAM) trust policy: - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Principal": { - "Service": "aidevops.amazonaws.com" - }, - "Action": "sts:AssumeRole", - "Condition": { - "StringEquals": { - "aws:SourceAccount": "<ACCOUNT_ID>" - }, - "ArnLike": { - "aws:SourceArn": "arn:aws:aidevops:us-east-1:<ACCOUNT_ID>:agentspace/*" - } - } - } - ] + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Principal": { + "Service": "aidevops.amazonaws.com" + }, + "Action": "sts:AssumeRole", + "Condition": { + "StringEquals": { + "aws:SourceAccount": "<ACCOUNT_ID>" + }, + "ArnLike": { + "aws:SourceArn": "arn:aws:aidevops:us-east-1:<ACCOUNT_ID>:agentspace/*" + } + } + } + ] @@ -87,3 +87,3 @@ Create the IAM role: - --region us-east-1 \ - --role-name DevOpsAgentRole-AgentSpace \ - --assume-role-policy-document file://devops-agentspace-trust-policy.json + --region us-east-1 \ + --role-name DevOpsAgentRole-AgentSpace \ + --assume-role-policy-document file://devops-agentspace-trust-policy.json @@ -99,2 +99,2 @@ Attach the AWS managed policy: - --role-name DevOpsAgentRole-AgentSpace \ - --policy-arn arn:aws:iam::aws:policy/AIOpsAssistantPolicy + --role-name DevOpsAgentRole-AgentSpace \ + --policy-arn arn:aws:iam::aws:policy/AIOpsAssistantPolicy @@ -108,29 +108,29 @@ Create and attach additional inline policy: - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "AllowAwsSupportActions", - "Effect": "Allow", - "Action": [ - "support:CreateCase", - "support:DescribeCases" - ], - "Resource": [ - "*" - ] - }, - { - "Sid": "AllowExpandedAIOpsAssistantPolicy", - "Effect": "Allow", - "Action": [ - "aidevops:GetKnowledgeItem", - "aidevops:ListKnowledgeItems", - "eks:AccessKubernetesApi", - "synthetics:GetCanaryRuns", - "route53:GetHealthCheckStatus", - "resource-explorer-2:Search" - ], - "Resource": [ - "*" - ] - } - ] + "Version": "2012-10-17", + "Statement": [ + { + "Sid": "AllowAwsSupportActions", + "Effect": "Allow", + "Action": [ + "support:CreateCase", + "support:DescribeCases" + ], + "Resource": [ + "*" + ] + }, + { + "Sid": "AllowExpandedAIOpsAssistantPolicy", + "Effect": "Allow", + "Action": [ + "aidevops:GetKnowledgeItem", + "aidevops:ListKnowledgeItems", + "eks:AccessKubernetesApi", + "synthetics:GetCanaryRuns", + "route53:GetHealthCheckStatus", + "resource-explorer-2:Search" + ], + "Resource": [ + "*" + ] + } + ] @@ -141,3 +141,3 @@ Create and attach additional inline policy: - --role-name DevOpsAgentRole-AgentSpace \ - --policy-name AllowExpandedAIOpsAssistantPolicy \ - --policy-document file://devops-agentspace-inline-policy.json + --role-name DevOpsAgentRole-AgentSpace \ + --policy-name AllowExpandedAIOpsAssistantPolicy \ + --policy-document file://devops-agentspace-inline-policy.json @@ -153,18 +153,18 @@ Create the IAM trust policy: - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Principal": { - "Service": "aidevops.amazonaws.com" - }, - "Action": "sts:AssumeRole", - "Condition": { - "StringEquals": { - "aws:SourceAccount": "<ACCOUNT_ID>" - }, - "ArnLike": { - "aws:SourceArn": "arn:aws:aidevops:us-east-1:<ACCOUNT_ID>:agentspace/*" - } - } - } - ] + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Principal": { + "Service": "aidevops.amazonaws.com" + }, + "Action": "sts:AssumeRole", + "Condition": { + "StringEquals": { + "aws:SourceAccount": "<ACCOUNT_ID>" + }, + "ArnLike": { + "aws:SourceArn": "arn:aws:aidevops:us-east-1:<ACCOUNT_ID>:agentspace/*" + } + } + } + ] @@ -179,3 +179,3 @@ Create the IAM role: - --role-name DevOpsAgentRole-WebappAdmin \ - --assume-role-policy-document file://devops-operator-trust-policy.json \ - --region us-east-1 + --role-name DevOpsAgentRole-WebappAdmin \ + --assume-role-policy-document file://devops-operator-trust-policy.json \ + --region us-east-1 @@ -192,45 +192,45 @@ Create and attach the operator app inline policy: - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "AllowBasicOperatorActions", - "Effect": "Allow", - "Action": [ - "aidevops:GetAgentSpace", - "aidevops:GetAssociation", - "aidevops:ListAssociations", - "aidevops:CreateBacklogTask", - "aidevops:GetBacklogTask", - "aidevops:UpdateBacklogTask", - "aidevops:ListBacklogTasks", - "aidevops:ListChildExecutions", - "aidevops:ListJournalRecords", - "aidevops:DiscoverTopology", - "aidevops:InvokeAgent", - "aidevops:ListGoals", - "aidevops:ListRecommendations", - "aidevops:ListExecutions", - "aidevops:GetRecommendation", - "aidevops:UpdateRecommendation", - "aidevops:CreateKnowledgeItem", - "aidevops:ListKnowledgeItems", - "aidevops:GetKnowledgeItem", - "aidevops:UpdateKnowledgeItem", - "aidevops:ListPendingMessages", - "aidevops:InitiateChatForCase", - "aidevops:EndChatForCase", - "aidevops:DescribeSupportLevel", - "aidevops:SendChatMessage" - ], - "Resource": "arn:aws:aidevops:us-east-1:<ACCOUNT_ID>:agentspace/*"