AWS IAM documentation change
Summary
Reformatted policy condition examples with multi-line YAML-style syntax for improved readability
Security assessment
Changes only affect formatting of existing condition operator examples without altering security content or introducing new security features. Examples maintain existing security-related condition checks (like SecureTransport, SourceIp) but present them more clearly.
Diff
diff --git a/IAM/latest/UserGuide/reference_policies_elements_condition_operators.md b/IAM/latest/UserGuide/reference_policies_elements_condition_operators.md index 67d59008d..ddcbac902 100644 --- a//IAM/latest/UserGuide/reference_policies_elements_condition_operators.md +++ b//IAM/latest/UserGuide/reference_policies_elements_condition_operators.md @@ -95 +95,7 @@ Policy Condition | Request Context | Result -| `aws:PrincipalTag/job-category:` – `iamuser-admin` | Match +| + + + aws:PrincipalTag/job-category: + – iamuser-admin + +| Match @@ -102 +108,7 @@ Policy Condition | Request Context | Result -| `aws:PrincipalTag/job-category:` – `dev-ops` | No match +| + + + aws:PrincipalTag/job-category: + – dev-ops + +| No match @@ -165 +177,7 @@ Policy condition | Request context | Result -| `aws:username` – `martha_rivera` | +| + + + aws:username: + – martha_rivera + +| @@ -183 +201,7 @@ Policy condition | Request context | Result -| `aws:username` – `nikki_wolf` | +| + + + aws:username: + – nikki_wolf + +| @@ -263 +287,9 @@ Policy condition | Request context | Result -| `aws:TagKeys:` – `environment` `aws:RequestTag/environment:` – `preprod` | Match +| + + + aws:TagKeys: + – environment + aws:RequestTag/environment: + – preprod + +| Match @@ -276 +308,10 @@ Policy condition | Request context | Result -| `aws:TagKeys:` – `environment` – `costcenter` `aws:RequestTag/environment:` – `PreProd` | Match +| + + + aws:TagKeys: + – environment + – costcenter + aws:RequestTag/environment: + – PreProd + +| Match @@ -289 +330,9 @@ Policy condition | Request context | Result -| `aws:TagKeys:` – `Environment` `aws:RequestTag/Environment:` – `preprod` | No match +| + + + aws:TagKeys: + – Environment + aws:RequestTag/Environment: + – preprod + +| No match @@ -302 +351,9 @@ Policy condition | Request context | Result -| `aws:TagKeys:` – `costcenter` `aws:RequestTag/environment:` – `preprod` | No match +| + + + aws:TagKeys: + – costcenter + aws:RequestTag/environment: + – preprod + +| No match @@ -315 +372,7 @@ Policy condition | Request context | Result -| No `aws:TagKeys` in the request context. `aws:RequestTag/environment:` – `storage` | No match +| No `aws:TagKeys` in the request context. + + + aws:RequestTag/environment: + – storage + +| No match @@ -328 +391,7 @@ Policy condition | Request context | Result -| `aws:TagKeys:` – `environment` No `aws:RequestTag/environment` in the request context. | No match +| + + + aws:TagKeys: + – environment + +No `aws:RequestTag/environment` in the request context. | No match @@ -389 +458,7 @@ Policy condition | Request context | Result -| `aws:ResourceOrgPaths:` – `o-acorg/r-acroot/ou-acroot-sportsou/costcenter/` | Match +| + + + aws:ResourceOrgPaths: + – o-acorg/r-acroot/ou-acroot-sportsou/costcenter/ + +| Match @@ -399 +474,7 @@ Policy condition | Request context | Result -| `aws:ResourceOrgPaths:` – `o-acorg/r-acroot/ou-acroot-mediaou/costcenter/` | No match +| + + + aws:ResourceOrgPaths: + – o-acorg/r-acroot/ou-acroot-mediaou/costcenter/ + +| No match @@ -540 +621,7 @@ Policy condition | Request context | Result -| `aws:SecureTransport:` – `true` | No match +| + + + aws:SecureTransport: + – false + +| No match @@ -547 +634,7 @@ Policy condition | Request context | Result -| `aws:SecureTransport:` – `false` | Match +| + + + aws:SecureTransport: + – true + +| Match @@ -582 +675,7 @@ Policy condition | Request context | Result -| `key:` – `QmluYXJ5VmFsdWVJbkJhc2U2NA==` | Match +| + + + key: + – QmluYXJ5VmFsdWVJbkJhc2U2NA== + +| Match @@ -589 +688,7 @@ Policy condition | Request context | Result -| `key:` – `ASIAIOSFODNN7EXAMPLE` | No match +| + + + key: + – ASIAIOSFODNN7EXAMPLE + +| No match @@ -649 +754,7 @@ Policy condition | Request context | Result -| `aws:SourceIp:` – `203.0.113.1` | Match +| + + + aws:SourceIp: + – 203.0.113.1 + +| Match @@ -656 +767,7 @@ Policy condition | Request context | Result -| `aws:SourceIp:` – `198.51.100.1` | No match +| + + + aws:SourceIp: + – 198.51.100.1 + +| No match @@ -728 +845,7 @@ Policy condition | Request context | Result -| `aws:SourceArn:` – `arn:aws:sns:us-west-2:123456789012:TOPIC-ID` | Match +| + + + aws:SourceArn: + – arn:aws:sns:us-west-2:123456789012:TOPIC-ID + +| Match @@ -735 +858,7 @@ Policy condition | Request context | Result -| `aws:SourceArn:` – `arn:aws:sns:us-west-2:777788889999:TOPIC-ID` | No match +| + + + aws:SourceArn: + – arn:aws:sns:us-west-2:777788889999:TOPIC-ID + +| No match @@ -792 +921,7 @@ Policy condition | Request context | Result -| `logs:LogGeneratingResourceArns:` – `arn:aws::cloudfront:123456789012:distribution/costcenter` | Match +| + + + logs:LogGeneratingResourceArns: + – arn:aws::cloudfront:123456789012:distribution/costcenter