AWS iot-mi documentation change
Summary
Updated key policy examples to show user/role ARNs instead of root, added comments about principal types, and fixed API documentation URLs
Security assessment
The changes promote security best practices by demonstrating non-root principal usage in policies, but there is no evidence of addressing a specific security vulnerability. URL corrections are non-security-related.
Diff
diff --git a/iot-mi/latest/devguide/data-protection.md b/iot-mi/latest/devguide/data-protection.md index 64d7dd719..7d2e8f960 100644 --- a//iot-mi/latest/devguide/data-protection.md +++ b//iot-mi/latest/devguide/data-protection.md @@ -126 +126,3 @@ The following is an example of a key policy statement you can use for managing a - "AWS": "arn:aws:iam::111122223333:root" + //Note: Both role and user are acceptable. + "AWS": "arn:aws:iam::111122223333:user/username", + "AWS": "arn:aws:iam::111122223333:role/roleName" @@ -181 +183 @@ The following is an example of a key policy statement you can use for managing a - "AWS": "arn:aws:iam::111122223333:root" + "AWS": "arn:aws:iam::111122223333:user/username" @@ -221 +223 @@ There are two APIs used for managing your encryption configuration of AWS KMS ke -To update the default encryption configuration, call `PutDefaultEncryptionConfiuration`. For more information on `PutDefaultEncryptionConfiuration`, see [PutDefaultEncryptionConfiuration](https://amazonaws.com/iot-mi/latest/APIReference/API_PutDefaultEncryptionConfiguration.html). +To update the default encryption configuration, call `PutDefaultEncryptionConfiuration`. For more information on `PutDefaultEncryptionConfiuration`, see [PutDefaultEncryptionConfiuration](https://docs.aws.amazon.com/iot-mi/latest/APIReference/API_PutDefaultEncryptionConfiguration.html). @@ -223 +225 @@ To update the default encryption configuration, call `PutDefaultEncryptionConfiu -To view the default encryption configuration, call `GetDefaultEncryptionConfiguration`. For more information on `GetDefaultEncryptionConfiguration`, see [GetDefaultEncryptionConfiguration](https://amazonaws.com/iot-mi/latest/APIReference/API_GetDefaultEncryptionConfiguration.html). +To view the default encryption configuration, call `GetDefaultEncryptionConfiguration`. For more information on `GetDefaultEncryptionConfiguration`, see [GetDefaultEncryptionConfiguration](https://docs.aws.amazon.com/iot-mi/latest/APIReference/API_GetDefaultEncryptionConfiguration.html).