AWS codecommit medium security documentation change

Service: codecommit · 2026-05-25 · Security-related medium

File: codecommit/latest/userguide/setting-up-gc.md

Summary

Updated credential generation steps to use API keys instead of HTTPS Git credentials

Security assessment

Changes migrate from less secure HTTPS Git credentials to more secure API keys with explicit service selection. This addresses credential management security by preventing potential misuse of broad credentials.

Diff

diff --git a/codecommit/latest/userguide/setting-up-gc.md b/codecommit/latest/userguide/setting-up-gc.md
index 956fd602e..7c09c3770 100644
--- a//codecommit/latest/userguide/setting-up-gc.md
+++ b//codecommit/latest/userguide/setting-up-gc.md
@@ -76 +76 @@ You can directly view and manage your CodeCommit credentials in **My Security Cr
-  3. On the user details page, choose the **Security Credentials** tab, and in **HTTPS Git credentials for AWS CodeCommit** , choose **Generate**.
+  3. On the user details page, choose the **Security Credentials** tab. In the **API keys** section, choose **Generate API Key**. Select **AWS CodeCommit** as the service.
@@ -78 +78 @@ You can directly view and manage your CodeCommit credentials in **My Security Cr
-![Generating Git credentials in the IAM console](/images/codecommit/latest/userguide/images/codecommit-iam-gc1.png)
+![Generating Git credentials in the IAM console](/images/codecommit/latest/userguide/images/codecommit-iam-gc1-api-keys.png)