AWS code-library documentation change
Summary
Added PowerShell V5 examples for policy version management and deletion
Security assessment
Shows secure policy lifecycle management without addressing specific vulnerabilities
Diff
diff --git a/code-library/latest/ug/iam_example_iam_DeletePolicyVersion_section.md b/code-library/latest/ug/iam_example_iam_DeletePolicyVersion_section.md index 9513984b0..c346da375 100644 --- a//code-library/latest/ug/iam_example_iam_DeletePolicyVersion_section.md +++ b//code-library/latest/ug/iam_example_iam_DeletePolicyVersion_section.md @@ -69,0 +70,22 @@ PowerShell +**Tools for PowerShell V5** + + +**Example 1: This example deletes the version identified as`v2` from the policy whose ARN is `arn:aws:iam::123456789012:policy/MySamplePolicy`.** + + + Remove-IAMPolicyVersion -PolicyArn arn:aws:iam::123456789012:policy/MySamplePolicy -VersionID v2 + + +**Example 2: This example deletes a policy by first deleting all non-default policy versions and then deleting the policy itself. The first line retrieves the policy object. The second line retrieves all of the policy versions that are not flagged as the default into a collection and then uses this command to delete each policy in the collection. The last line removes the policy itself as well as the remaining default version. Note that to successfully delete a managed policy, you must also detach the policy from any users, groups, or roles by using the`Unregister-IAMUserPolicy`, `Unregister-IAMGroupPolicy`, and `Unregister-IAMRolePolicy` commands. See the example for the `Remove-IAMPolicy` cmdlet. ** + + + $pol = Get-IAMPolicy -PolicyArn arn:aws:iam::123456789012:policy/MySamplePolicy + Get-IAMPolicyVersions -PolicyArn $pol.Arn | where {-not $_.IsDefaultVersion} | Remove-IAMPolicyVersion -PolicyArn $pol.Arn -force + Remove-IAMPolicy -PolicyArn $pol.Arn -force + + + * For API details, see [DeletePolicyVersion](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_. + + + +