AWS IAM documentation change
Summary
Added tags 'project=doc-smith' and 'tutorial=cloudwatch-streams' to IAM role creation and Lambda function creation commands.
Security assessment
The changes add resource tags for organizational purposes without altering security configurations, permissions, or addressing vulnerabilities. Tags don't impact resource security posture.
Diff
diff --git a/IAM/latest/UserGuide/iam_example_iam_GettingStarted_032_section.md b/IAM/latest/UserGuide/iam_example_iam_GettingStarted_032_section.md index 4957ab856..1a79241c8 100644 --- a//IAM/latest/UserGuide/iam_example_iam_GettingStarted_032_section.md +++ b//IAM/latest/UserGuide/iam_example_iam_GettingStarted_032_section.md @@ -191 +191 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - ROLE_OUTPUT=$(log_cmd "aws iam create-role --role-name '$ROLE_NAME' --assume-role-policy-document file://trust-policy.json --output json") + ROLE_OUTPUT=$(log_cmd "aws iam create-role --role-name '$ROLE_NAME' --assume-role-policy-document file://trust-policy.json --tags Key=project,Value=doc-smith Key=tutorial,Value=cloudwatch-streams --output json") @@ -245 +245 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - LAMBDA1_OUTPUT=$(log_cmd "aws lambda create-function --function-name '$LAMBDA_FUNCTION1' --runtime python3.11 --role '$ROLE_ARN' --handler lambda_function.handler --zip-file fileb://lambda_function.zip --timeout 30 --memory-size 128") + LAMBDA1_OUTPUT=$(log_cmd "aws lambda create-function --function-name '$LAMBDA_FUNCTION1' --runtime python3.11 --role '$ROLE_ARN' --handler lambda_function.handler --zip-file fileb://lambda_function.zip --timeout 30 --memory-size 128 --tags project=doc-smith,tutorial=cloudwatch-streams") @@ -250 +250 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - LAMBDA2_OUTPUT=$(log_cmd "aws lambda create-function --function-name '$LAMBDA_FUNCTION2' --runtime python3.11 --role '$ROLE_ARN' --handler lambda_function.handler --zip-file fileb://lambda_function.zip --timeout 30 --memory-size 128") + LAMBDA2_OUTPUT=$(log_cmd "aws lambda create-function --function-name '$LAMBDA_FUNCTION2' --runtime python3.11 --role '$ROLE_ARN' --handler lambda_function.handler --zip-file fileb://lambda_function.zip --timeout 30 --memory-size 128 --tags project=doc-smith,tutorial=cloudwatch-streams")