AWS IAM documentation change
Summary
Added tagging commands for MSK cluster, IAM policy, IAM role, security group, key pair, and EC2 instance
Security assessment
Changes implement consistent resource tagging. Encryption configuration remains unchanged and no security issues are addressed.
Diff
diff --git a/IAM/latest/UserGuide/sts_example_ec2_GettingStarted_057_section.md b/IAM/latest/UserGuide/sts_example_ec2_GettingStarted_057_section.md index 8c1a62e1e..376829281 100644 --- a//IAM/latest/UserGuide/sts_example_ec2_GettingStarted_057_section.md +++ b//IAM/latest/UserGuide/sts_example_ec2_GettingStarted_057_section.md @@ -371 +371,2 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - --encryption-info "{\"EncryptionInTransit\": {\"InCluster\": true, \"ClientBroker\": \"TLS\"}}" 2>&1) + --encryption-info "{\"EncryptionInTransit\": {\"InCluster\": true, \"ClientBroker\": \"TLS\"}}" \ + --tags project=doc-smith,tutorial=amazon-managed-streaming-for-apache-kafka-gs 2>&1) @@ -484,0 +486,3 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + aws iam tag-policy --policy-arn "$POLICY_ARN" \ + --tags Key=project,Value=doc-smith Key=tutorial,Value=amazon-managed-streaming-for-apache-kafka-gs + @@ -500,0 +505,2 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + aws iam tag-role --role-name "$ROLE_NAME" \ + --tags Key=project,Value=doc-smith Key=tutorial,Value=amazon-managed-streaming-for-apache-kafka-gs @@ -586 +592,2 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - --vpc-id "$DEFAULT_VPC_ID" 2>&1) + --vpc-id "$DEFAULT_VPC_ID" \ + --tag-specifications 'ResourceType=security-group,Tags=[{Key=project,Value=doc-smith},{Key=tutorial,Value=amazon-managed-streaming-for-apache-kafka-gs}]' 2>&1) @@ -647 +654 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - KEY_RESPONSE=$(aws ec2 create-key-pair --key-name "$KEY_NAME" --query 'KeyMaterial' --output text 2>&1) + KEY_RESPONSE=$(aws ec2 create-key-pair --key-name "$KEY_NAME" --tag-specifications 'ResourceType=key-pair,Tags=[{Key=project,Value=doc-smith},{Key=tutorial,Value=amazon-managed-streaming-for-apache-kafka-gs}]' --query 'KeyMaterial' --output text 2>&1) @@ -687 +694 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - --tag-specifications "ResourceType=instance,Tags=[{Key=Name,Value=MSKTutorialClient-${RANDOM_SUFFIX}}]" 2>&1) + --tag-specifications "ResourceType=instance,Tags=[{Key=Name,Value=MSKTutorialClient-${RANDOM_SUFFIX}},{Key=project,Value=doc-smith},{Key=tutorial,Value=amazon-managed-streaming-for-apache-kafka-gs}]" 2>&1)