AWS rolesanywhere documentation change
Summary
Updated trust policy examples by adding JSON formatting blocks and replacing specific service/ARN values with empty placeholders
Security assessment
Changes involve formatting adjustments and making example policies more generic by removing hardcoded values. This appears to be documentation cleanup rather than addressing security vulnerabilities. No evidence of security fixes or vulnerability mitigation.
Diff
diff --git a/rolesanywhere/latest/userguide/trust-model.md b/rolesanywhere/latest/userguide/trust-model.md index 040cf7612..ab82bd4bb 100644 --- a//rolesanywhere/latest/userguide/trust-model.md +++ b//rolesanywhere/latest/userguide/trust-model.md @@ -120,0 +121,6 @@ The following example shows a trust policy that adds a condition based on the `S +JSON + + +**** + + @@ -128 +134 @@ The following example shows a trust policy that adds a condition based on the `S - "Service": "rolesanywhere.amazonaws.com" + "Service": "" @@ -141 +147 @@ The following example shows a trust policy that adds a condition based on the `S - "arn:aws:rolesanywhere:region:account:trust-anchor/TA_ID" + "" @@ -154,0 +162,6 @@ The following example shows a trust policy that adds a condition based on the `I +JSON + + +**** + + @@ -162 +175 @@ The following example shows a trust policy that adds a condition based on the `I - "Service": "rolesanywhere.amazonaws.com" + "Service": "" @@ -175 +188 @@ The following example shows a trust policy that adds a condition based on the `I - "arn:aws:rolesanywhere:region:account:trust-anchor/TA_ID" + "" @@ -237,0 +252,6 @@ The following example shows a trust policy that adds a condition based on the `S +JSON + + +**** + + @@ -245 +265 @@ The following example shows a trust policy that adds a condition based on the `S - "Service": "rolesanywhere.amazonaws.com" + "Service": "" @@ -260 +280 @@ The following example shows a trust policy that adds a condition based on the `S - "arn:aws:rolesanywhere:region:account:trust-anchor/TA_ID" + "" @@ -277,0 +299,6 @@ To use the `aws:SourceArn` and `aws:SourceAccount` global condition keys, set th +JSON + + +**** + + @@ -285 +312 @@ To use the `aws:SourceArn` and `aws:SourceAccount` global condition keys, set th - "Service": "rolesanywhere.amazonaws.com" + "Service": "" @@ -295 +322 @@ To use the `aws:SourceArn` and `aws:SourceAccount` global condition keys, set th - "arn:aws:rolesanywhere:region:account:trust-anchor/TA_ID" + "" @@ -304,0 +333,6 @@ To use the `sts:SourceIdentity` condition key, set the source identity prefix an +JSON + + +**** + + @@ -312 +346 @@ To use the `sts:SourceIdentity` condition key, set the source identity prefix an - "Service": "rolesanywhere.amazonaws.com" + "Service": "" @@ -326 +360 @@ To use the `sts:SourceIdentity` condition key, set the source identity prefix an - "arn:aws:rolesanywhere:region:account:trust-anchor/TA_ID" + "" @@ -334 +368 @@ To use the `sts:SourceIdentity` condition key, set the source identity prefix an - "Service": "rolesanywhere.amazonaws.com" + "Service": ""