AWS Security ChangesHomeSearch

AWS code-library documentation change

Service: code-library · 2026-05-04 · Documentation low

File: code-library/latest/ug/iam_example_iam_GettingStarted_032_section.md

Summary

Added tags parameter to IAM role creation and Lambda function creation commands

Security assessment

The tags added are for organizational categorization (project=doc-smith). No security-related context or vulnerability mitigation is mentioned in the changes.

Diff

diff --git a/code-library/latest/ug/iam_example_iam_GettingStarted_032_section.md b/code-library/latest/ug/iam_example_iam_GettingStarted_032_section.md
index 3fc77ead9..c4420d607 100644
--- a//code-library/latest/ug/iam_example_iam_GettingStarted_032_section.md
+++ b//code-library/latest/ug/iam_example_iam_GettingStarted_032_section.md
@@ -193 +193 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-    ROLE_OUTPUT=$(log_cmd "aws iam create-role --role-name '$ROLE_NAME' --assume-role-policy-document file://trust-policy.json --output json")
+    ROLE_OUTPUT=$(log_cmd "aws iam create-role --role-name '$ROLE_NAME' --assume-role-policy-document file://trust-policy.json --tags Key=project,Value=doc-smith Key=tutorial,Value=cloudwatch-streams --output json")
@@ -247 +247 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-    LAMBDA1_OUTPUT=$(log_cmd "aws lambda create-function --function-name '$LAMBDA_FUNCTION1' --runtime python3.11 --role '$ROLE_ARN' --handler lambda_function.handler --zip-file fileb://lambda_function.zip --timeout 30 --memory-size 128")
+    LAMBDA1_OUTPUT=$(log_cmd "aws lambda create-function --function-name '$LAMBDA_FUNCTION1' --runtime python3.11 --role '$ROLE_ARN' --handler lambda_function.handler --zip-file fileb://lambda_function.zip --timeout 30 --memory-size 128 --tags project=doc-smith,tutorial=cloudwatch-streams")
@@ -252 +252 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-    LAMBDA2_OUTPUT=$(log_cmd "aws lambda create-function --function-name '$LAMBDA_FUNCTION2' --runtime python3.11 --role '$ROLE_ARN' --handler lambda_function.handler --zip-file fileb://lambda_function.zip --timeout 30 --memory-size 128")
+    LAMBDA2_OUTPUT=$(log_cmd "aws lambda create-function --function-name '$LAMBDA_FUNCTION2' --runtime python3.11 --role '$ROLE_ARN' --handler lambda_function.handler --zip-file fileb://lambda_function.zip --timeout 30 --memory-size 128 --tags project=doc-smith,tutorial=cloudwatch-streams")