AWS code-library documentation change
Summary
Added tagging for AWS Config resources including S3 bucket, SNS topic, IAM role, configuration recorder, and delivery channel.
Security assessment
Changes only add project/tutorial tags for resource organization. While AWS Config is security-related, the tagging itself doesn't enable or document security features.
Diff
diff --git a/code-library/latest/ug/sts_example_config_service_GettingStarted_053_section.md b/code-library/latest/ug/sts_example_config_service_GettingStarted_053_section.md index d739c2002..b363a0de9 100644 --- a//code-library/latest/ug/sts_example_config_service_GettingStarted_053_section.md +++ b//code-library/latest/ug/sts_example_config_service_GettingStarted_053_section.md @@ -191,0 +192,3 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + + aws s3api put-bucket-tagging --bucket "$S3_BUCKET_NAME" --tagging 'TagSet=[{Key=project,Value=doc-smith},{Key=tutorial,Value=aws-config-gs}]' + echo "Tags applied to S3 bucket" @@ -205 +208 @@ There's more on GitHub. Find the complete example and learn how to set up and ru - SNS_RESULT=$(aws sns create-topic --name "$TOPIC_NAME") + SNS_RESULT=$(aws sns create-topic --name "$TOPIC_NAME" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs) @@ -236,0 +240,3 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + aws iam tag-role --role-name "$ROLE_NAME" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs + echo "Tags applied to IAM role" + @@ -325,0 +332,5 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + if [ "$CREATED_NEW_CONFIG_RECORDER" = "true" ]; then + aws configservice tag-resource --resource-arn "arn:aws:config:${AWS_REGION}:${ACCOUNT_ID}:config-recorder/${CONFIG_RECORDER_NAME}" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs + echo "Tags applied to configuration recorder" + fi + @@ -374,0 +386,3 @@ There's more on GitHub. Find the complete example and learn how to set up and ru + + aws configservice tag-resource --resource-arn "arn:aws:config:${AWS_REGION}:${ACCOUNT_ID}:delivery-channel/${DELIVERY_CHANNEL_NAME}" --tags Key=project,Value=doc-smith Key=tutorial,Value=aws-config-gs + echo "Tags applied to delivery channel"