AWS Security ChangesHomeSearch

AWS mediatailor medium security documentation change

Service: mediatailor · 2025-04-20 · Security-related medium

File: mediatailor/latest/ug/monitoring-permissions.md

Summary

Corrected IAM policy condition key from 'ExternalID' to 'ExternalId'

Security assessment

Fixes a security configuration by using the correct 'sts:ExternalId' condition key, which is critical for preventing confused deputy issues. Incorrect casing could lead to policy misconfiguration and potential privilege escalation.

Diff

diff --git a/mediatailor/latest/ug/monitoring-permissions.md b/mediatailor/latest/ug/monitoring-permissions.md
index 3beeb2120..32e486cf1 100644
--- a//mediatailor/latest/ug/monitoring-permissions.md
+++ b//mediatailor/latest/ug/monitoring-permissions.md
@@ -19 +19 @@ Use AWS Identity and Access Management (IAM) to create a role that gives AWS Ele
-  5. Select **Require external ID** and enter `Midas`. This option automatically adds a condition to the trust policy that allows the service to assume the role only if the request includes the correct `sts:ExternalID`.
+  5. Select **Require external ID** and enter `Midas`. This option automatically adds a condition to the trust policy that allows the service to assume the role only if the request includes the correct `sts:ExternalId`.