AWS lambda documentation change
Summary
Expanded S3 resource ARN in IAM policy example
Security assessment
Policy syntax improvement without security vulnerability context
Diff
diff --git a/lambda/latest/dg/invocation-async-retain-records.md index 7a0cbfc39..12128177c 100644 --- a/lambda/latest/dg/invocation-async-retain-records.md +++ b/lambda/latest/dg/invocation-async-retain-records.md @@ -129 +129,4 @@ The following example shows an IAM policy that limits your function's `s3:PutObj - "Resource": "arn:aws:s3:::*/*", + "Resource": [ + "arn:aws:s3:::*/*", + "arn:aws:s3:::*" + ],