AWS IAM medium security documentation change

Service: IAM · 2025-03-23 · Security-related medium

File: IAM/latest/UserGuide/reference_policies_elements_condition_operators.md

Summary

Changed policy example principal from AWS account to service principal

Security assessment

Corrects a policy example to use service principal (sns.amazonaws.com) instead of AWS account ID, preventing potential misconfiguration risks

Diff

diff --git a/IAM/latest/UserGuide/reference_policies_elements_condition_operators.md b/IAM/latest/UserGuide/reference_policies_elements_condition_operators.md
index 258923d67..54769a835 100644
--- a/IAM/latest/UserGuide/reference_policies_elements_condition_operators.md
+++ b/IAM/latest/UserGuide/reference_policies_elements_condition_operators.md
@@ -705,3 +705 @@ The following resource-based policy example shows a policy attached to an Amazon
-        "Principal": {
-          "AWS": "123456789012"
-        },
+        "Principal": {"Service": "sns.amazonaws.com"},