AWS AWSCloudFormation medium security documentation change
Summary
Removed duplicate important note about Amazon SNS policy action restrictions in AWS::SNS::TopicPolicy resources
Security assessment
Second instance of removing the same security warning about valid policy actions, further reducing visibility of a security-sensitive configuration distinction between IAM and SNS policies.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/quickref-iam.md b/AWSCloudFormation/latest/UserGuide/quickref-iam.md index 3af0b734f..4b65e0dce 100644 --- a//AWSCloudFormation/latest/UserGuide/quickref-iam.md +++ b//AWSCloudFormation/latest/UserGuide/quickref-iam.md @@ -309,4 +308,0 @@ This snippet shows how to create a policy and apply it to multiple groups using -###### Important - -The Amazon SNS policy actions that are declared in the AWS::IAM::Policy resource differ from the Amazon SNS topic policy actions that are declared in the AWS::SNS::TopicPolicy resource. For example, the policy actions `sns:Unsubscribe` and `sns:SetSubscriptionAttributes` are valid for the `AWS::IAM::Policy` resource, but are invalid for the `AWS::SNS::TopicPolicy` resource. For more information about valid Amazon SNS policy actions that you can use with the `AWS::IAM::Policy` resource, see [Special information for Amazon SNS policies](https://docs.aws.amazon.com/sns/latest/dg/AccessPolicyLanguage_SpecialInfo.html) in the _Amazon Simple Notification Service Developer Guide_. - @@ -405,4 +400,0 @@ This snippet shows how to create a policy and apply it to an Amazon SNS topic us -###### Important - -The Amazon SNS policy actions that are declared in the AWS::IAM::Policy resource differ from the Amazon SNS topic policy actions that are declared in the AWS::SNS::TopicPolicy resource. For example, the policy actions `sns:Unsubscribe` and `sns:SetSubscriptionAttributes` are valid for the `AWS::IAM::Policy` resource, but are invalid for the `AWS::SNS::TopicPolicy` resource. For more information about valid Amazon SNS policy actions that you can use with the `AWS::IAM::Policy` resource, see [Special information for Amazon SNS policies](https://docs.aws.amazon.com/sns/latest/dg/AccessPolicyLanguage_SpecialInfo.html) in the _Amazon Simple Notification Service Developer Guide_. - @@ -506 +498 @@ This section provides CloudFormation template examples for IAM roles for EC2 Ins -For more information about IAM roles, see [Working with roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/WorkingWithRoles.html) in the _AWS Identity and Access Management User Guide_. +For more information about IAM roles, see [IAM roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html) in the _IAM User Guide_.