AWS Security ChangesHomeSearch

AWS code-library documentation change

Service: code-library · 2026-05-04 · Documentation low

File: code-library/latest/ug/config-service_example_config_service_GettingStarted_053_section.md

Summary

Added resource tagging commands for S3 buckets, SNS topics, IAM roles, and AWS Config resources

Security assessment

Changes exclusively add organizational tags to resources. No security policies, access controls, or vulnerability mitigations are introduced or modified.

Diff

diff --git a/code-library/latest/ug/config-service_example_config_service_GettingStarted_053_section.md b/code-library/latest/ug/config-service_example_config_service_GettingStarted_053_section.md
index 57906e666..d1f50569d 100644
--- a//code-library/latest/ug/config-service_example_config_service_GettingStarted_053_section.md
+++ b//code-library/latest/ug/config-service_example_config_service_GettingStarted_053_section.md
@@ -191,0 +192,3 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+        
+        aws s3api put-bucket-tagging --bucket "$S3_BUCKET_NAME" --tagging 'TagSet=[{Key=project,Value=doc-smith},{Key=tutorial,Value=aws-config-gs}]'
+        echo "Tags applied to S3 bucket"
@@ -205 +208 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-    SNS_RESULT=$(aws sns create-topic --name "$TOPIC_NAME")
+    SNS_RESULT=$(aws sns create-topic --name "$TOPIC_NAME" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs)
@@ -236,0 +240,3 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+    aws iam tag-role --role-name "$ROLE_NAME" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs
+    echo "Tags applied to IAM role"
+    
@@ -325,0 +332,5 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+    if [ "$CREATED_NEW_CONFIG_RECORDER" = "true" ]; then
+        aws configservice tag-resource --resource-arn "arn:aws:config:${AWS_REGION}:${ACCOUNT_ID}:config-recorder/${CONFIG_RECORDER_NAME}" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs
+        echo "Tags applied to configuration recorder"
+    fi
+    
@@ -374,0 +386,3 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+        
+        aws configservice tag-resource --resource-arn "arn:aws:config:${AWS_REGION}:${ACCOUNT_ID}:delivery-channel/${DELIVERY_CHANNEL_NAME}" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs
+        echo "Tags applied to delivery channel"