AWS IAM: Add AWS Glue role templates to role-template table
Summary
Adds two AWS Glue role templates (AWSGlueCrawlerS3PathsRoleTemplate and AWSGluePowerUserRoleTemplate) with their ARNs and parameters to the role template reference table.
Security assessment
Documents additional IAM role templates that grant Glue access to S3 paths; it is IAM-permission-adjacent reference material but does not describe or fix a specific weakness.
Evidence
AWS Glue | AWSGlueCrawlerS3PathsRoleTemplate | `arn:aws:iam::aws:role-template/glue.amazonaws.com/AWSGlueCrawlerS3PathsRoleTemplate:1` | RoleName, accountId, s3path
Diff
diff --git a/IAM/latest/UserGuide/id_roles_create_role-template.md b/IAM/latest/UserGuide/id_roles_create_role-template.md index b3ab654..2351da7 100644 --- a//IAM/latest/UserGuide/id_roles_create_role-template.md +++ b//IAM/latest/UserGuide/id_roles_create_role-template.md @@ -40,0 +41,2 @@ Amazon EventBridge | PowerUserRoleTemplate | `arn:aws:iam::aws:role-template/iam +AWS Glue | AWSGlueCrawlerS3PathsRoleTemplate | `arn:aws:iam::aws:role-template/glue.amazonaws.com/AWSGlueCrawlerS3PathsRoleTemplate:1` | RoleName, accountId, s3path +AWS Glue | AWSGluePowerUserRoleTemplate | `arn:aws:iam::aws:role-template/glue.amazonaws.com/AWSGluePowerUserRoleTemplate:1` | accountId, RoleName