AWS code-library documentation change
Summary
Added PowerShell V5 example for retrieving group inline policies
Security assessment
Documents policy inspection capabilities but does not address a specific vulnerability. Enhances visibility into group permissions without security fixes.
Diff
diff --git a/code-library/latest/ug/iam_example_iam_GetGroupPolicy_section.md b/code-library/latest/ug/iam_example_iam_GetGroupPolicy_section.md index 958506ae3..a80db1783 100644 --- a//code-library/latest/ug/iam_example_iam_GetGroupPolicy_section.md +++ b//code-library/latest/ug/iam_example_iam_GetGroupPolicy_section.md @@ -91,0 +92,35 @@ PowerShell +**Tools for PowerShell V5** + + +**Example 1: This example returns details about the embedded inline policy named`PowerUserAccess-Testers` for the group `Testers`. The `PolicyDocument` property is URL encoded. It is decoded in this example with the `UrlDecode` .NET method.** + + + $results = Get-IAMGroupPolicy -GroupName Testers -PolicyName PowerUserAccess-Testers + $results + + +**Output:** + + + GroupName PolicyDocument PolicyName + --------- -------------- ---------- + Testers %7B%0A%20%20%22Version%22%3A%20%222012-10-17%22%2C%0A%20... PowerUserAccess-Testers + + [System.Reflection.Assembly]::LoadWithPartialName("System.Web.HttpUtility") + [System.Web.HttpUtility]::UrlDecode($results.PolicyDocument) + { + "Version": "2012-10-17", + "Statement": [ + { + "Effect": "Allow", + "NotAction": "iam:*", + "Resource": "*" + } + ] + } + + * For API details, see [GetGroupPolicy](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_. + + + +