Skip to content

fix(aws-transform): link executor policies to the public AWS pages - #293

Open
TheSaiEaranti wants to merge 1 commit into
awslabs:mainfrom
TheSaiEaranti:fix-aws-transform-policy-links
Open

TheSaiEaranti wants to merge 1 commit into
awslabs:mainfrom
TheSaiEaranti:fix-aws-transform-policy-links

Conversation

@TheSaiEaranti

@TheSaiEaranti TheSaiEaranti commented Oct 28, 2026 •

Copy link
Copy Markdown

The remote EC2 and Batch execution references link the Executor policy to code.amazon.com, which is Amazon's internal code browser. Outside Amazon the link redirects to a corporate sign-in page, so neither a user nor the agent can open the policy. Both policies are published AWS managed policies, so this points the links at their pages in the AWS Managed Policy Reference.

Related

No existing issue. The links came in with the 1.4.0 sync in #242. Before that, the EC2 reference pointed at a public GitHub URL (#196).

Changes

The link text and the rest of each line are unchanged. aws-lambda-durable-functions and dsql already link managed policies to the same reference.

I didn't point the EC2 link back at the bundled references/AWSTransformInfrastructureExecutorAccessEC2.json, because it is older than the published policy (it has no tag:GetResources, for example). Since this plugin is synced from an internal source, the same change probably needs to go there too, or the next sync will bring the old links back.

Verification:

  • The old links return a 307 to midway-auth.amazon.com, and uv run tools/validate-urls.py reports both as [401]. With this change those two entries are gone and nothing new is reported.
  • The new pages return 200 with no redirect and show the policies' ARNs (arn:aws:iam::aws:policy/AWSTransformInfrastructureExecutorAccessEC2 and ...Batch).
  • dprint check, markdownlint-cli2, the lint:manifests ajv checks, node tools/validate-cross-refs.cjs, uv run tools/validate-references.py and uv run tools/validate-size.py: same output as main.
  • uv run --with pytest pytest tools plugins: 132 passed.

Acknowledgment

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of the project license.

The EC2 and Batch remote execution references linked the Executor
policy to code.amazon.com, which redirects to an Amazon corporate
sign-in. Both policies are published AWS managed policies, so link
their pages in the AWS Managed Policy Reference instead.

Bumps aws-transform to 1.9.1.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant