AWS code-library documentation change
Summary
Added resource tagging for MSK clusters, IAM policies/roles, security groups, key pairs, and EC2 instances
Security assessment
Changes implement organizational tagging. Existing encryption configuration (EncryptionInTransit) remains unchanged and isn't part of the modification. No security fixes or security feature documentation added.
Diff
diff --git a/code-library/latest/ug/iam_example_ec2_GettingStarted_057_section.md b/code-library/latest/ug/iam_example_ec2_GettingStarted_057_section.md index cafc996b1..79b1b166b 100644 --- a//code-library/latest/ug/iam_example_ec2_GettingStarted_057_section.md +++ b//code-library/latest/ug/iam_example_ec2_GettingStarted_057_section.md @@ -373 +373,2 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - --encryption-info "{\"EncryptionInTransit\": {\"InCluster\": true, \"ClientBroker\": \"TLS\"}}" 2>&1) + --encryption-info "{\"EncryptionInTransit\": {\"InCluster\": true, \"ClientBroker\": \"TLS\"}}" \ + --tags project=doc-smith,tutorial=amazon-managed-streaming-for-apache-kafka-gs 2>&1) @@ -486,0 +488,3 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + aws iam tag-policy --policy-arn "$POLICY_ARN" \ + --tags Key=project,Value=doc-smith Key=tutorial,Value=amazon-managed-streaming-for-apache-kafka-gs + @@ -502,0 +507,2 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + aws iam tag-role --role-name "$ROLE_NAME" \ + --tags Key=project,Value=doc-smith Key=tutorial,Value=amazon-managed-streaming-for-apache-kafka-gs @@ -588 +594,2 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - --vpc-id "$DEFAULT_VPC_ID" 2>&1) + --vpc-id "$DEFAULT_VPC_ID" \ + --tag-specifications 'ResourceType=security-group,Tags=[{Key=project,Value=doc-smith},{Key=tutorial,Value=amazon-managed-streaming-for-apache-kafka-gs}]' 2>&1) @@ -649 +656 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - KEY_RESPONSE=$(aws ec2 create-key-pair --key-name "$KEY_NAME" --query 'KeyMaterial' --output text 2>&1) + KEY_RESPONSE=$(aws ec2 create-key-pair --key-name "$KEY_NAME" --tag-specifications 'ResourceType=key-pair,Tags=[{Key=project,Value=doc-smith},{Key=tutorial,Value=amazon-managed-streaming-for-apache-kafka-gs}]' --query 'KeyMaterial' --output text 2>&1) @@ -689 +696 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - --tag-specifications "ResourceType=instance,Tags=[{Key=Name,Value=MSKTutorialClient-${RANDOM_SUFFIX}}]" 2>&1) + --tag-specifications "ResourceType=instance,Tags=[{Key=Name,Value=MSKTutorialClient-${RANDOM_SUFFIX}},{Key=project,Value=doc-smith},{Key=tutorial,Value=amazon-managed-streaming-for-apache-kafka-gs}]" 2>&1)