AWS artifact medium security documentation change

Service: artifact · 2025-04-03 · Security-related medium

File: artifact/latest/ug/migrating-reports-to-v2-permissions.md

Summary

Updated deprecation timeline for artifact:Get IAM action in AWS GovCloud and added AWS GovCloud-specific policy examples. Removed region applicability note.

Security assessment

Deprecation of the artifact:Get IAM action suggests a security-related permissions update. Adding GovCloud policies expands security documentation for region-specific implementations.

Diff

diff --git a/artifact/latest/ug/migrating-reports-to-v2-permissions.md b/artifact/latest/ug/migrating-reports-to-v2-permissions.md
index 90d9cb344..a5409333f 100644
--- a//artifact/latest/ug/migrating-reports-to-v2-permissions.md
+++ b//artifact/latest/ug/migrating-reports-to-v2-permissions.md
@@ -9,4 +8,0 @@ Migrating reports to new permissions
-###### Note
-
-The content of this page is only applicable to commercial AWS [Regions](https://docs.aws.amazon.com/glossary/latest/reference/glos-chap.html?icmpid=docs_homepage_addtlrcs#region), and does not currently apply to AWS GovCloud (US) Regions.
-
@@ -19 +15 @@ To access reports through the fine-grained permissions, you can utilize the [AWS
-The legacy IAM action `artifact:Get` is deprecated as of March 3, 2025.
+The IAM action `artifact:Get` will be deprecated in the AWS GovCloud (US) partition on July 1, 2025. The same action was deprecated in the AWS partition on March 3, 2025.
@@ -28,0 +25,3 @@ Legacy policy:
+AWS
+    
+    
@@ -42,0 +42,19 @@ Legacy policy:
+
+AWS GovCloud (US)
+    
+    
+    
+    {
+        "Version": "2012-10-17",
+        "Statement": [{
+            "Effect": "Allow",
+            "Action": [
+                "artifact:Get"
+            ],
+            "Resource": [
+                "arn:aws-us-gov:artifact:::report-package/*"
+            ]
+        }]
+    }
+                
+
@@ -65,0 +85,3 @@ Legacy policy:
+AWS
+    
+    
@@ -81,0 +104,21 @@ Legacy policy:
+
+AWS GovCloud (US)
+    
+    
+    
+    {
+        "Version": "2012-10-17",
+        "Statement": [{
+            "Effect": "Allow",
+            "Action": [
+                "artifact:Get"
+            ],
+            "Resource": [
+                "arn:aws-us-gov:artifact:::report-package/Certifications and Attestations/SOC/*",
+                "arn:aws-us-gov:artifact:::report-package/Certifications and Attestations/PCI/*",
+                "arn:aws-us-gov:artifact:::report-package/Certifications and Attestations/ISO/*"
+            ]
+        }]
+    }
+            
+