AWS nova-act documentation change
Summary
Added IAM actions reference and resource types table with ARN formats and condition keys
Security assessment
Expanded IAM policy documentation helps implement proper access controls, but there's no indication of addressing a specific security vulnerability. The change improves security guidance quality rather than fixing a known issue.
Diff
diff --git a/nova-act/latest/userguide/security-iam-service-with-iam.md b/nova-act/latest/userguide/security-iam-service-with-iam.md index 0bf1710c1..ea42f120a 100644 --- a//nova-act/latest/userguide/security-iam-service-with-iam.md +++ b//nova-act/latest/userguide/security-iam-service-with-iam.md @@ -55,0 +56,2 @@ You can specify multiple actions using wildcards (*). For example, to specify al +To see the complete list of Amazon Nova Act actions, see [Actions Defined by Amazon Nova Act](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonnovaact.html#amazonnovaact-actions-as-permissions) in the _IAM User Guide_. + @@ -59,0 +62,7 @@ The `Resource` element specifies the object or objects to which the action appli +The following resource types are defined by this service and can be used in the Resource element of IAM permission policy statements. Each action in the Actions table identifies the resource types that can be specified with that action. A resource type can also define which condition keys you can include in a policy. These keys are displayed in the last column of the Resource types table. For details about the columns in the following table, see [Resource types](http://dev-dsk-sarora-1e-6e78f4a9.us-east-1.amazon.com/userguide.sarora/security-iam-service-with-iam.html) table. + +Resource types | ARN | Condition keys +---|---|--- +workflow-definition | arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/${WorkflowDefinitionName} | N/A +workflow-run | arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/${WorkflowDefinitionName}/workflow-run/${WorkflowRunId} | N/A + @@ -68 +77 @@ Amazon Nova Act workflow run resources have the following ARN: - arn:${Partition}:nova-act:${Region}:${Account}:workflow-run/${WorkflowRunId} + arn:${Partition}:nova-act:${Region}:${Account}:workflow-definition/${WorkflowDefinitionId}/workflow-run/${WorkflowRunId}