AWS imagebuilder: Fix typos and clarify Image Builder IAM condition key docs
Summary
Corrects a recurring typo ('CreateInfrastrucutreConfiguration' → 'CreateInfrastructureConfiguration'), fixes grammar ('This value' → 'The value'), updates the IAM condition-keys link to the Service Authorization Reference, clarifies that the SNS topic ARN condition key governs image status notifications for only the AVAILABLE and FAILED states, and simplifies the 'Tag a resource' link text. These are editorial/cosmetic fixes with no substantive change to documented permissions.
Security assessment
The single added content line only refines the wording of an existing IAM condition-key description and fixes typos/link text; it neither addresses a specific vulnerability nor introduces new security guidance, so security impact is minimal.
Evidence
Use this key to filter access by the SNS topic ARN in the request to which Image Builder publishes image status notifications. Image Builder publishes image status notifications only for the `AVAILABLE` and `FAILED` states.
Diff
diff --git a/imagebuilder/latest/userguide/security_iam_service-with-iam.md b/imagebuilder/latest/userguide/security_iam_service-with-iam.md index 4af6be6..32e2f94 100644 --- a//imagebuilder/latest/userguide/security_iam_service-with-iam.md +++ b//imagebuilder/latest/userguide/security_iam_service-with-iam.md @@ -137 +137 @@ For details about the Image Builder service-linked role, see [Use IAM service-li -With IAM identity-based policies, you can specify allowed or denied actions and resources, and also the conditions under which actions are allowed or denied. Image Builder supports specific actions, resources, and condition keys. For information about all of the elements that you use in a JSON policy, see [Actions, Resources, and Condition Keys for Amazon EC2 Image Builder](https://docs.aws.amazon.com/IAM/latest/UserGuide/list_amazonec2imagebuilder.html) in the _IAM User Guide_. +With IAM identity-based policies, you can specify allowed or denied actions and resources, and also the conditions under which actions are allowed or denied. Image Builder supports specific actions, resources, and condition keys. For information about all of the elements that you use in a JSON policy, see [Actions, Resources, and Condition Keys for Amazon EC2 Image Builder](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonec2imagebuilder.html) in the _Service Authorization Reference_. @@ -258 +258 @@ Use this key to filter access by the presence of tag keys in the request. This a -**Availability** – This key is available to only the `CreateInfrastrucutreConfiguration` and `UpdateInfrastructureConfiguration` APIs. +**Availability** – This key is available to only the `CreateInfrastructureConfiguration` and `UpdateInfrastructureConfiguration` APIs. @@ -266 +266 @@ Use this key to filter access by the tag key-value pairs that are attached to th -**Availability** – This key is available to only the `CreateInfrastrucutreConfiguration` and `UpdateInfrastructureConfiguration` APIs. +**Availability** – This key is available to only the `CreateInfrastructureConfiguration` and `UpdateInfrastructureConfiguration` APIs. @@ -284 +284 @@ Use this key to filter access by the EC2 Instance Metadata HTTP Token Requiremen -This value for this key can be either `optional` or `required`. +The value for this key can be either `optional` or `required`. @@ -286 +286 @@ This value for this key can be either `optional` or `required`. -**Availability** – This key is available to only the `CreateInfrastrucutreConfiguration` and `UpdateInfrastructureConfiguration` APIs. +**Availability** – This key is available to only the `CreateInfrastructureConfiguration` and `UpdateInfrastructureConfiguration` APIs. @@ -292 +292 @@ Works with [string operators](https://docs.aws.amazon.com/IAM/latest/UserGuide/r -Use this key to filter access by the SNS Topic ARN in the request to which terminal state notifications will be published. +Use this key to filter access by the SNS topic ARN in the request to which Image Builder publishes image status notifications. Image Builder publishes image status notifications only for the `AVAILABLE` and `FAILED` states. @@ -294 +294 @@ Use this key to filter access by the SNS Topic ARN in the request to which termi -**Availability** – This key is available to only the `CreateInfrastrucutreConfiguration` and `UpdateInfrastructureConfiguration` APIs. +**Availability** – This key is available to only the `CreateInfrastructureConfiguration` and `UpdateInfrastructureConfiguration` APIs. @@ -312 +312 @@ When you update a resource policy using Image Builder, the update will appear in -You can attach tags to Image Builder resources or pass tags in a request to Image Builder. To control access based on tags, you provide tag information in the [condition element](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition.html) of a policy using the `imagebuilder:ResourceTag/`key-name``, `aws:RequestTag/`key-name``, or `aws:TagKeys` condition keys. For more information about tagging Image Builder resources, see [Tag a resource from the AWS CLI](./tag-resources.html#cli-tag-resource). +You can attach tags to Image Builder resources or pass tags in a request to Image Builder. To control access based on tags, you provide tag information in the [condition element](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition.html) of a policy using the `imagebuilder:ResourceTag/`key-name``, `aws:RequestTag/`key-name``, or `aws:TagKeys` condition keys. For more information about tagging Image Builder resources, see [Tag a resource](./tag-resources.html#cli-tag-resource).