AWS rosa high security documentation change

Service: rosa · 2025-03-26 · Security-related high

File: rosa/latest/userguide/security-iam-rosa-classic-account-policies.md

Summary

Removed 'iam:PassRole' permission from policy document

Security assessment

Reduction of permissions to prevent potential privilege escalation via role passing

Diff

diff --git a/rosa/latest/userguide/security-iam-rosa-classic-account-policies.md b/rosa/latest/userguide/security-iam-rosa-classic-account-policies.md
index 781bae34f..525e096ce 100644
--- a/rosa/latest/userguide/security-iam-rosa-classic-account-policies.md
+++ b/rosa/latest/userguide/security-iam-rosa-classic-account-policies.md
@@ -149 +148,0 @@ Permissions defined in this policy document specify which actions are allowed or
-                    "iam:PassRole",