AWS verifiedpermissions documentation change
Summary
Added documentation about editable and non-editable elements of policy templates
Security assessment
The changes clarify policy template management without addressing security vulnerabilities or describing security features
Diff
diff --git a/verifiedpermissions/latest/userguide/policy-templates-edit.md b/verifiedpermissions/latest/userguide/policy-templates-edit.md index 459274ad8..8bed78bd0 100644 --- a//verifiedpermissions/latest/userguide/policy-templates-edit.md +++ b//verifiedpermissions/latest/userguide/policy-templates-edit.md @@ -8,0 +9,20 @@ You can edit, or update, policy templates in Verified Permissions using the AWS +You can change the following elements of a policy template: + + * The `action` referenced by the policy template + + * A condition clause, such as `when` and `unless` + + + + +You can't change the following elements of a policy template. To change any of these elements you will need to delete and re-created the policy template. + + * The effect of a policy template from `permit` or `forbid` + + * The `principal` referenced by a policy template + + * The `resource` referenced by a policy template + + + +