AWS code-library documentation change
Summary
Added resource tagging throughout CloudFormation and EKS examples
Security assessment
Adds consistent operational tagging (project=doc-smith) to CloudFormation stacks, IAM roles, EKS clusters and node groups. While tags can be used in IAM policies, the change doesn't document security features or address vulnerabilities.
Diff
diff --git a/code-library/latest/ug/bash_2_cloudformation_code_examples.md b/code-library/latest/ug/bash_2_cloudformation_code_examples.md index 94554db6d..ac765a528 100644 --- a//code-library/latest/ug/bash_2_cloudformation_code_examples.md +++ b//code-library/latest/ug/bash_2_cloudformation_code_examples.md @@ -332,0 +333 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + --tags Key=project,Value=doc-smith Key=tutorial,Value=cloudformation-gs \ @@ -653 +654,2 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - --template-url https://s3.us-west-2.amazonaws.com/amazon-eks/cloudformation/2020-10-29/amazon-eks-vpc-private-subnets.yaml) + --template-url https://s3.us-west-2.amazonaws.com/amazon-eks/cloudformation/2020-10-29/amazon-eks-vpc-private-subnets.yaml \ + --tags Key=project,Value=doc-smith Key=tutorial,Value=eks-gs) @@ -689,0 +692,2 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + aws iam tag-role --role-name "$CLUSTER_ROLE_NAME" \ + --tags Key=project,Value=doc-smith Key=tutorial,Value=eks-gs @@ -721,0 +726,2 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + aws iam tag-role --role-name "$NODE_ROLE_NAME" \ + --tags Key=project,Value=doc-smith Key=tutorial,Value=eks-gs @@ -783 +789,2 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - --resources-vpc-config subnetIds="$SUBNET_IDS",securityGroupIds="$SECURITY_GROUP_ID") + --resources-vpc-config subnetIds="$SUBNET_IDS",securityGroupIds="$SECURITY_GROUP_ID" \ + --tags Key=project,Value=doc-smith,Key=tutorial,Value=eks-gs) @@ -835 +842,2 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - --subnets "${SUBNET_IDS_ARRAY[@]}") + --subnets "${SUBNET_IDS_ARRAY[@]}" \ + --tags Key=project,Value=doc-smith,Key=tutorial,Value=eks-gs)