AWS code-library documentation change
Summary
Added tagging commands for S3 bucket, IAM role, Config Recorder, and Delivery Channel resources with project/tutorial tags
Security assessment
The changes only add resource tagging for organizational purposes (project/tutorial labels). No security vulnerabilities, configurations, or features are addressed. Tagging improves resource management but doesn't mitigate security risks.
Diff
diff --git a/code-library/latest/ug/bash_2_config-service_code_examples.md b/code-library/latest/ug/bash_2_config-service_code_examples.md index a5164aea5..4331c7697 100644 --- a//code-library/latest/ug/bash_2_config-service_code_examples.md +++ b//code-library/latest/ug/bash_2_config-service_code_examples.md @@ -205,0 +206,3 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + + aws s3api put-bucket-tagging --bucket "$S3_BUCKET_NAME" --tagging 'TagSet=[{Key=project,Value=doc-smith},{Key=tutorial,Value=aws-config-gs}]' + echo "Tags applied to S3 bucket" @@ -219 +222 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - SNS_RESULT=$(aws sns create-topic --name "$TOPIC_NAME") + SNS_RESULT=$(aws sns create-topic --name "$TOPIC_NAME" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs) @@ -250,0 +254,3 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + aws iam tag-role --role-name "$ROLE_NAME" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs + echo "Tags applied to IAM role" + @@ -339,0 +346,5 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + if [ "$CREATED_NEW_CONFIG_RECORDER" = "true" ]; then + aws configservice tag-resource --resource-arn "arn:aws:config:${AWS_REGION}:${ACCOUNT_ID}:config-recorder/${CONFIG_RECORDER_NAME}" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs + echo "Tags applied to configuration recorder" + fi + @@ -388,0 +400,3 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + + aws configservice tag-resource --resource-arn "arn:aws:config:${AWS_REGION}:${ACCOUNT_ID}:delivery-channel/${DELIVERY_CHANNEL_NAME}" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs + echo "Tags applied to delivery channel"