AWS AmazonElastiCache documentation change
Summary
Added note about using case-insensitive condition operators for CacheNodeType and CacheParameterGroupName in IAM policies
Security assessment
Clarifies IAM policy requirements but does not address a specific security vulnerability. Enhances documentation about security feature usage.
Diff
diff --git a/AmazonElastiCache/latest/dg/IAM.ConditionKeys.md b/AmazonElastiCache/latest/dg/IAM.ConditionKeys.md index 6c1e6ab78..e9f1cb8f0 100644 --- a/AmazonElastiCache/latest/dg/IAM.ConditionKeys.md +++ b/AmazonElastiCache/latest/dg/IAM.ConditionKeys.md @@ -20,0 +21,9 @@ To apply a condition, you add the condition information to the IAM policy statem +###### Note + + * To construct `Condition` elements using condition keys of `String` type, use the case insensitive condition operators `StringEqualsIgnoreCase` or `StringNotEqualsIgnoreCase` to compare a key to a string value. + + * ElastiCache processes the input arguments for `CacheNodeType` and `CacheParameterGroupName` in a case insensitive manner. For this reason, the string condition operators `StringEqualsIgnoreCase`, and `StringNotEqualsIgnoreCase` should be used in permissions policies that reference them. + + + +