AWS IAM documentation change
Summary
Added tagging commands for S3 bucket, SNS topic, IAM role, Config recorder, and delivery channel
Security assessment
Changes focus on adding resource tags for organizational purposes. No security vulnerabilities addressed or security features documented.
Diff
diff --git a/IAM/latest/UserGuide/sts_example_config_service_GettingStarted_053_section.md b/IAM/latest/UserGuide/sts_example_config_service_GettingStarted_053_section.md index 12db3b65a..43a84eb7e 100644 --- a//IAM/latest/UserGuide/sts_example_config_service_GettingStarted_053_section.md +++ b//IAM/latest/UserGuide/sts_example_config_service_GettingStarted_053_section.md @@ -189,0 +190,3 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + + aws s3api put-bucket-tagging --bucket "$S3_BUCKET_NAME" --tagging 'TagSet=[{Key=project,Value=doc-smith},{Key=tutorial,Value=aws-config-gs}]' + echo "Tags applied to S3 bucket" @@ -203 +206 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - SNS_RESULT=$(aws sns create-topic --name "$TOPIC_NAME") + SNS_RESULT=$(aws sns create-topic --name "$TOPIC_NAME" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs) @@ -234,0 +238,3 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + aws iam tag-role --role-name "$ROLE_NAME" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs + echo "Tags applied to IAM role" + @@ -323,0 +330,5 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + if [ "$CREATED_NEW_CONFIG_RECORDER" = "true" ]; then + aws configservice tag-resource --resource-arn "arn:aws:config:${AWS_REGION}:${ACCOUNT_ID}:config-recorder/${CONFIG_RECORDER_NAME}" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs + echo "Tags applied to configuration recorder" + fi + @@ -372,0 +384,3 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + + aws configservice tag-resource --resource-arn "arn:aws:config:${AWS_REGION}:${ACCOUNT_ID}:delivery-channel/${DELIVERY_CHANNEL_NAME}" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs + echo "Tags applied to delivery channel"