AWS Security ChangesHomeSearch

AWS AmazonElastiCache documentation change

Service: AmazonElastiCache · 2025-03-23 · Documentation low

File: AmazonElastiCache/latest/dg/IAM.ConditionKeys.md

Summary

Added note about using case-insensitive condition operators for CacheNodeType and CacheParameterGroupName in IAM policies

Security assessment

Clarifies IAM policy requirements but does not address a specific security vulnerability. Enhances documentation about security feature usage.

Diff

diff --git a/AmazonElastiCache/latest/dg/IAM.ConditionKeys.md b/AmazonElastiCache/latest/dg/IAM.ConditionKeys.md
index 6c1e6ab78..e9f1cb8f0 100644
--- a/AmazonElastiCache/latest/dg/IAM.ConditionKeys.md
+++ b/AmazonElastiCache/latest/dg/IAM.ConditionKeys.md
@@ -20,0 +21,9 @@ To apply a condition, you add the condition information to the IAM policy statem
+###### Note
+
+  * To construct `Condition` elements using condition keys of `String` type, use the case insensitive condition operators `StringEqualsIgnoreCase` or `StringNotEqualsIgnoreCase` to compare a key to a string value.
+
+  * ElastiCache processes the input arguments for `CacheNodeType` and `CacheParameterGroupName` in a case insensitive manner. For this reason, the string condition operators `StringEqualsIgnoreCase`, and `StringNotEqualsIgnoreCase` should be used in permissions policies that reference them.
+
+
+
+