title: Is it safe to leave an AWS IAM ARN value in a public Git repository?
body: <p>I've created a CloudFormation template and would like to store it on my Public GitHub account. </p>
  
  <p>I've created an IAM role that is associated with environments at creation. To achieve this I've included the ARN value of the Role in the environment configuration:   </p>
  
  <pre><code>"WebServerEnvironment" : {
  "Type" : "AWS::ElasticBeanstalk::Environment",
  "Properties" : {
  "OptionSettings":[
  {
   "Namespace" : "aws:autoscaling:launchconfiguration",
   "OptionName" : "IamInstanceProfile",
   "Value" : "arn:aws:iam::1234567890:instance-profile/myCloudFormationNameHere"
  }]
  </code></pre>
  
  <p>My question is, could this ARN value be used to compromise my app? Or due to the account specific nature of IAM access is this information <em>safe</em> in the public domain?</p>