AWS verifiedpermissions documentation change
Summary
Added documentation about deletion protection feature and required steps to disable it before deletion
Security assessment
Documents a security control (deletion protection) but does not indicate this is in response to a specific security incident
Diff
diff --git a/verifiedpermissions/latest/userguide/policy-stores-delete.md b/verifiedpermissions/latest/userguide/policy-stores-delete.md index db2ddf6cc..d77b986f9 100644 --- a//verifiedpermissions/latest/userguide/policy-stores-delete.md +++ b//verifiedpermissions/latest/userguide/policy-stores-delete.md @@ -8,0 +9,2 @@ You can delete Amazon Verified Permissions policy stores using the AWS Managemen +Deletion protection prevents accidental deletion of a policy store. Deletion protection is enabled on all new policy stores created through the AWS Management Console. By contrast, it is disabled for all policy stores created through an API or SDK call. + @@ -30,0 +33,4 @@ AWS Management Console +###### Note + +If deletion protection is enabled, you'll need to disable it before you can choose **Delete**. To disable it, select **Disable deletion protection**. + @@ -46,0 +53,9 @@ This command produces no output if successful. +###### Note + +If deletion protection is enabled for this policy store, you must first run the `update-policy-store` operation and disable deletion protection. + + + aws verifiedpermissions update-policy-store \ + --deletion-protection "DISABLED" \ + --policy-store-id PSEXAMPLEabcdefg111111 +