AWS AWSCloudFormation medium security documentation change
Summary
Updated documentation for AgentPermissions property with detailed explanation about granting permissions for profiling agent actions and resource-based policies
Security assessment
The change explicitly documents security-related permissions required for profiling agent operations (ConfigureAgent and PostAgentProfile) and references resource-based policies. This addresses potential security misconfigurations by clarifying IAM requirements.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-codeguruprofiler-profilinggroup-agentpermissions.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-codeguruprofiler-profilinggroup-agentpermissions.md index 4ce70865c..1a8eb50f2 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-codeguruprofiler-profilinggroup-agentpermissions.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-codeguruprofiler-profilinggroup-agentpermissions.md @@ -11 +11 @@ This is the new _CloudFormation Template Reference Guide_. Please update your bo -The `AgentPermissions` property type specifies Property description not available. for an [AWS::CodeGuruProfiler::ProfilingGroup](./aws-resource-codeguruprofiler-profilinggroup.html). +The agent permissions attached to a profiling group. Granting `AgentPermissions` to a role or user allows that role or user to perform actions required by the profiling agent, `ConfigureAgent` and `PostAgentProfile`. For more information, see [Resource-based policies in CodeGuru Profiler](https://docs.aws.amazon.com/codeguru/latest/profiler-ug/resource-based-policies.html) in the _Amazon CodeGuru Profiler User Guide_. @@ -37 +37 @@ To declare this entity in your CloudFormation template, use the following syntax -Property description not available. +A list of string ARNs for the roles and users you want to grant access to the profiling group. Wildcards are not supported in the ARNs. You are allowed to provide up to 50 ARNs. An empty list is not permitted.