AWS code-library documentation change
Summary
Added tags parameter to IAM role creation and Lambda function creation commands
Security assessment
The tags added are for organizational categorization (project=doc-smith). No security-related context or vulnerability mitigation is mentioned in the changes.
Diff
diff --git a/code-library/latest/ug/iam_example_iam_GettingStarted_032_section.md b/code-library/latest/ug/iam_example_iam_GettingStarted_032_section.md index 3fc77ead9..c4420d607 100644 --- a//code-library/latest/ug/iam_example_iam_GettingStarted_032_section.md +++ b//code-library/latest/ug/iam_example_iam_GettingStarted_032_section.md @@ -193 +193 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - ROLE_OUTPUT=$(log_cmd "aws iam create-role --role-name '$ROLE_NAME' --assume-role-policy-document file://trust-policy.json --output json") + ROLE_OUTPUT=$(log_cmd "aws iam create-role --role-name '$ROLE_NAME' --assume-role-policy-document file://trust-policy.json --tags Key=project,Value=doc-smith Key=tutorial,Value=cloudwatch-streams --output json") @@ -247 +247 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - LAMBDA1_OUTPUT=$(log_cmd "aws lambda create-function --function-name '$LAMBDA_FUNCTION1' --runtime python3.11 --role '$ROLE_ARN' --handler lambda_function.handler --zip-file fileb://lambda_function.zip --timeout 30 --memory-size 128") + LAMBDA1_OUTPUT=$(log_cmd "aws lambda create-function --function-name '$LAMBDA_FUNCTION1' --runtime python3.11 --role '$ROLE_ARN' --handler lambda_function.handler --zip-file fileb://lambda_function.zip --timeout 30 --memory-size 128 --tags project=doc-smith,tutorial=cloudwatch-streams") @@ -252 +252 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - LAMBDA2_OUTPUT=$(log_cmd "aws lambda create-function --function-name '$LAMBDA_FUNCTION2' --runtime python3.11 --role '$ROLE_ARN' --handler lambda_function.handler --zip-file fileb://lambda_function.zip --timeout 30 --memory-size 128") + LAMBDA2_OUTPUT=$(log_cmd "aws lambda create-function --function-name '$LAMBDA_FUNCTION2' --runtime python3.11 --role '$ROLE_ARN' --handler lambda_function.handler --zip-file fileb://lambda_function.zip --timeout 30 --memory-size 128 --tags project=doc-smith,tutorial=cloudwatch-streams")