AWS IAM documentation change
Summary
Added tagging commands for IAM roles, S3 buckets, and SageMaker feature groups with project/tutorial metadata
Security assessment
The changes only add resource tagging for organizational purposes. No security vulnerabilities, access controls, or security features are modified or documented. Tagging improves resource management but doesn't inherently impact security posture.
Diff
diff --git a/IAM/latest/UserGuide/sts_example_iam_GettingStarted_028_section.md b/IAM/latest/UserGuide/sts_example_iam_GettingStarted_028_section.md index 33237e5df..d90d3f6ac 100644 --- a//IAM/latest/UserGuide/sts_example_iam_GettingStarted_028_section.md +++ b//IAM/latest/UserGuide/sts_example_iam_GettingStarted_028_section.md @@ -155,0 +156,4 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + # Tag the role + echo "Tagging IAM role..." >&2 + aws iam tag-role --role-name "$role_name" --tags Key=project,Value=doc-smith Key=tutorial,Value=sagemaker-featurestore 2>&1 + @@ -269,0 +274,4 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + # Tag the S3 bucket + echo "Tagging S3 bucket: $S3_BUCKET_NAME" + aws s3api put-bucket-tagging --bucket "$S3_BUCKET_NAME" --tagging 'TagSet=[{Key=project,Value=doc-smith},{Key=tutorial,Value=sagemaker-featurestore}]' 2>&1 + @@ -310 +318,2 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - --role-arn "$ROLE_ARN" 2>&1) + --role-arn "$ROLE_ARN" \ + --tags Key=project,Value=doc-smith Key=tutorial,Value=sagemaker-featurestore 2>&1) @@ -345 +354,2 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - --role-arn "$ROLE_ARN" 2>&1) + --role-arn "$ROLE_ARN" \ + --tags Key=project,Value=doc-smith Key=tutorial,Value=sagemaker-featurestore 2>&1)