AWS Security ChangesHomeSearch

AWS code-library documentation change

Service: code-library · 2026-05-04 · Documentation low

File: code-library/latest/ug/sts_example_config_service_GettingStarted_053_section.md

Summary

Added tagging for AWS Config resources including S3 bucket, SNS topic, IAM role, configuration recorder, and delivery channel.

Security assessment

Changes only add project/tutorial tags for resource organization. While AWS Config is security-related, the tagging itself doesn't enable or document security features.

Diff

diff --git a/code-library/latest/ug/sts_example_config_service_GettingStarted_053_section.md b/code-library/latest/ug/sts_example_config_service_GettingStarted_053_section.md
index d739c2002..b363a0de9 100644
--- a//code-library/latest/ug/sts_example_config_service_GettingStarted_053_section.md
+++ b//code-library/latest/ug/sts_example_config_service_GettingStarted_053_section.md
@@ -191,0 +192,3 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+        
+        aws s3api put-bucket-tagging --bucket "$S3_BUCKET_NAME" --tagging 'TagSet=[{Key=project,Value=doc-smith},{Key=tutorial,Value=aws-config-gs}]'
+        echo "Tags applied to S3 bucket"
@@ -205 +208 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
-    SNS_RESULT=$(aws sns create-topic --name "$TOPIC_NAME")
+    SNS_RESULT=$(aws sns create-topic --name "$TOPIC_NAME" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs)
@@ -236,0 +240,3 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+    aws iam tag-role --role-name "$ROLE_NAME" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs
+    echo "Tags applied to IAM role"
+    
@@ -325,0 +332,5 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+    if [ "$CREATED_NEW_CONFIG_RECORDER" = "true" ]; then
+        aws configservice tag-resource --resource-arn "arn:aws:config:${AWS_REGION}:${ACCOUNT_ID}:config-recorder/${CONFIG_RECORDER_NAME}" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs
+        echo "Tags applied to configuration recorder"
+    fi
+    
@@ -374,0 +386,3 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+        
+        aws configservice tag-resource --resource-arn "arn:aws:config:${AWS_REGION}:${ACCOUNT_ID}:delivery-channel/${DELIVERY_CHANNEL_NAME}" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs
+        echo "Tags applied to delivery channel"