AWS Security ChangesHomeSearch

AWS iot-twinmaker documentation change

Service: iot-twinmaker · 2025-03-26 · Documentation low

File: iot-twinmaker/latest/guide/tm-sw-custom-ws.md

Summary

Added wildcard resource path in IAM role policy example

Security assessment

Modifies IAM resource ARN pattern in security documentation but does not address a known security issue. Focuses on policy configuration requirements.

Diff

diff --git a/iot-twinmaker/latest/guide/tm-sw-custom-ws.md b/iot-twinmaker/latest/guide/tm-sw-custom-ws.md
index 42e5e70e2..0f99585b3 100644
--- a/iot-twinmaker/latest/guide/tm-sw-custom-ws.md
+++ b/iot-twinmaker/latest/guide/tm-sw-custom-ws.md
@@ -119 +119,2 @@ Use the following IAM role as a template for the required role:
-                    "arn:aws:iottwinmaker:REGION:ACCOUNT_ID:workspace/WORKSPACE_ID"
+                    "arn:aws:iottwinmaker:REGION:ACCOUNT_ID:workspace/WORKSPACE_ID",
+                    "arn:aws:iottwinmaker:REGION:ACCOUNT_ID:workspace/WORKSPACE_ID/*"