AWS mediaconnect documentation change
Summary
Replaced policy references with actual JSON policy definitions for MediaConnect read-only and full-access managed policies
Security assessment
The change provides explicit IAM policy definitions, which are security-related, but does not address a specific security vulnerability or incident.
Diff
diff --git a/mediaconnect/latest/ug/security-iam-awsmanpol.md index d122b9f42..1504fa7d8 100644 --- a/mediaconnect/latest/ug/security-iam-awsmanpol.md +++ b/mediaconnect/latest/ug/security-iam-awsmanpol.md @@ -62 +62,28 @@ This policy includes the following permissions. -To view the permissions for this policy, see [AWSElementalMediaConnectReadOnlyAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSElementalMediaConnectReadOnlyAccess.html) in the _AWS Managed Policy Reference_. + + { + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "mediaconnect:ListBridges", + "mediaconnect:ListEntitlements", + "mediaconnect:ListFlows", + "mediaconnect:ListGatewayInstances", + "mediaconnect:ListGateways", + "mediaconnect:ListOfferings", + "mediaconnect:ListReservations", + "mediaconnect:DescribeBridge", + "mediaconnect:DescribeFlow", + "mediaconnect:DescribeFlowSourceMetadata", + "mediaconnect:DescribeFlowSourceThumbnail", + "mediaconnect:DescribeGateway", + "mediaconnect:DescribeGatewayInstance", + "mediaconnect:DescribeOffering", + "mediaconnect:DescribeReservation", + "mediaconnect:ListTagsForResource" + ], + "Resource": "*" + } + ] + } @@ -79 +106,13 @@ This policy includes the following permissions. -To view the permissions for this policy, see [AWSElementalMediaConnectFullAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSElementalMediaConnectFullAccess.html) in the _AWS Managed Policy Reference_. + + { + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "Action": [ + "mediaconnect:*" + ], + "Resource": "*" + } + ] + }