AWS AWSEC2 medium security documentation change
Summary
Added entry about updated AWSEC2CapacityReservationFleetRolePolicy managed policy changing condition operator from StringLike to ArnLike
Security assessment
Changing IAM condition operator from StringLike to ArnLike is a security hardening measure to enforce more precise ARN matching, reducing potential over-permission risks
Diff
diff --git a/AWSEC2/latest/UserGuide/DocumentHistory.md index 9fd6b05a8..ea1f1e6fb 100644 --- a/AWSEC2/latest/UserGuide/DocumentHistory.md +++ b/AWSEC2/latest/UserGuide/DocumentHistory.md @@ -12,0 +13 @@ Change| Description| Date +[Updated AWSEC2CapacityReservationFleetRolePolicy managed policy](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-iam-awsmanpol.html#security-iam-awsmanpol-AWSEC2CapacityReservationFleetRolePolicy)| Amazon EC2 updated the `AWSEC2CapacityReservationFleetRolePolicy` managed policy to use the `ArnLike` condition operator instead of the `StringLike` condition operator.| March 3, 2025