AWS IAM documentation change

Service: IAM · 2026-05-04 · Documentation low

File: IAM/latest/UserGuide/iam_example_ecs_ServiceConnect_085_section.md

Summary

Added resource tagging commands throughout ECS Service Connect tutorial

Security assessment

Changes add resource tagging (security groups, log groups, IAM roles) but don't address security vulnerabilities. Tags improve resource management but don't impact security posture.

Diff

diff --git a/IAM/latest/UserGuide/iam_example_ecs_ServiceConnect_085_section.md b/IAM/latest/UserGuide/iam_example_ecs_ServiceConnect_085_section.md
index 00d016d92..832d9dcdf 100644
--- a//IAM/latest/UserGuide/iam_example_ecs_ServiceConnect_085_section.md
+++ b//IAM/latest/UserGuide/iam_example_ecs_ServiceConnect_085_section.md
@@ -171 +171,2 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-            --vpc-id "$VPC_ID" 2>&1)
+            --vpc-id "$VPC_ID" \
+            --tag-specifications 'ResourceType=security-group,Tags=[{Key=project,Value=doc-smith},{Key=tutorial,Value=amazon-ecs-service-connect}]' 2>&1)
@@ -198 +199 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-        aws logs create-log-group --log-group-name "/ecs/service-connect-nginx" 2>&1 | grep -v "ResourceAlreadyExistsException" || {
+        aws logs create-log-group --log-group-name "/ecs/service-connect-nginx" --tags project=doc-smith,tutorial=amazon-ecs-service-connect 2>&1 | grep -v "ResourceAlreadyExistsException" || {
@@ -208 +209 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-        aws logs create-log-group --log-group-name "/ecs/service-connect-proxy" 2>&1 | grep -v "ResourceAlreadyExistsException" || {
+        aws logs create-log-group --log-group-name "/ecs/service-connect-proxy" --tags project=doc-smith,tutorial=amazon-ecs-service-connect 2>&1 | grep -v "ResourceAlreadyExistsException" || {
@@ -225 +226 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-            --tags key=Environment,value=tutorial 2>&1)
+            --tags key=Environment,value=tutorial key=project,value=doc-smith key=tutorial,value=amazon-ecs-service-connect 2>&1)
@@ -268,0 +270 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+            aws iam tag-role --role-name ecsTaskExecutionRole --tags Key=project,Value=doc-smith Key=tutorial,Value=amazon-ecs-service-connect
@@ -299,0 +302 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+            aws iam tag-role --role-name ecsTaskRole --tags Key=project,Value=doc-smith Key=tutorial,Value=amazon-ecs-service-connect
@@ -403,0 +407,8 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+            },
+            {
+                "key": "project",
+                "value": "doc-smith"
+            },
+            {
+                "key": "tutorial",
+                "value": "amazon-ecs-service-connect"