AWS audit-manager documentation change

Service: audit-manager · 2025-03-19 · Documentation low

File: audit-manager/latest/userguide/create-assessments.md

Summary

Removed 'Audit owner permissions' section containing IAM policy details

Security assessment

Removes existing security documentation about audit owner permissions but doesn't indicate a security issue

Diff

diff --git a/audit-manager/latest/userguide/create-assessments.md b/audit-manager/latest/userguide/create-assessments.md
index c3ddb0baa..6c78b198d 100644
--- a/audit-manager/latest/userguide/create-assessments.md
+++ b/audit-manager/latest/userguide/create-assessments.md
@@ -32,2 +31,0 @@ Before you start this tutorial, make sure that you meet the following conditions
-    * [Audit owner permissions](./create-assessments.html#choose-audit-owners-permissions)
-
@@ -120,48 +117,0 @@ In this step, you specify the audit owners for your assessment. Audit owners are
-#### Audit owner permissions
-
-The below policy is attached for all the audit owners of an assessment.
-
-Audit Manager replaces the `placeholder text` with your account and resource identifiers before attaching the policy.
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Sid": "AuditOwner",
-                "Effect": "Allow",
-                "Principal": {
-                    "AWS": "Principal for user/role who are the audit owners of the Assessment"
-                },
-                "Action": [
-                    "auditmanager:GetAssessment",
-                    "auditmanager:UpdateAssessment",
-                    "auditmanager:UpdateAssessmentControlSetStatus",
-                    "auditmanager:UpdateAssessmentStatus",
-                    "auditmanager:UpdateAssessmentControl",
-                    "auditmanager:DeleteAssessment",
-                    "auditmanager:GetChangeLogs",
-                    "auditmanager:GetEvidenceFoldersByAssessment",
-                    "auditmanager:GetEvidenceFoldersByAssessmentControl",
-                    "auditmanager:BatchImportEvidenceToAssessmentControl",
-                    "auditmanager:GetEvidenceFolder",
-                    "auditmanager:GetEvidence",
-                    "auditmanager:GetEvidenceByEvidenceFolder",
-                    "auditmanager:BatchCreateDelegationByAssessment",
-                    "auditmanager:BatchDeleteDelegationByAssessment",
-                    "auditmanager:AssociateAssessmentReportEvidenceFolder",
-                    "auditmanager:BatchAssociateAssessmentReportEvidence",
-                    "auditmanager:BatchDisassociateAssessmentReportEvidence",
-                    "auditmanager:CreateAssessmentReport",
-                    "auditmanager:DeleteAssessmentReport",
-                    "auditmanager:DisassociateAssessmentReportEvidenceFolder",
-                    "auditmanager:GetAssessmentReportUrl"
-                ],
-                "Resource": [
-                    "arn:aws:auditmanager:region:account_ID:assessment/assessment_ID",
-                    "arn:aws:auditmanager:region:account_ID:assessment/assessment_ID/*"
-                ]
-            }
-        ]
-    }
-