AWS IAM documentation change
Summary
Updated example values in condition key documentation (username changes from johndoe/janedoe/martha_rivera to john/jane/martha)
Security assessment
Changes only affect example placeholder values in documentation samples. No security implications as this is purely cosmetic documentation formatting without altering security concepts or recommendations.
Diff
diff --git a/IAM/latest/UserGuide/reference_policies_elements_condition.md b/IAM/latest/UserGuide/reference_policies_elements_condition.md index 4fecf1ebe..bb66924bf 100644 --- a//IAM/latest/UserGuide/reference_policies_elements_condition.md +++ b//IAM/latest/UserGuide/reference_policies_elements_condition.md @@ -16 +16 @@ The context key that you specify in a policy condition can be a [global conditio -Context key _names_ are not case-sensitive. For example, including the `aws:SourceIP` context key is equivalent to testing for `AWS:SourceIp`. Case-sensitivity of context key _values_ depends on the [condition operator](./reference_policies_elements_condition_operators.html) that you use. For example, the following condition includes the `StringEquals` operator to make sure that only requests made by `johndoe` match. Users named `JohnDoe` are denied access. +Context key _names_ are not case-sensitive. For example, including the `aws:SourceIP` context key is equivalent to testing for `AWS:SourceIp`. Case-sensitivity of context key _values_ depends on the [condition operator](./reference_policies_elements_condition_operators.html) that you use. For example, the following condition includes the `StringEquals` operator to make sure that only requests made by `john` match. Users named `John` are denied access. @@ -19 +19 @@ Context key _names_ are not case-sensitive. For example, including the `aws:Sour - "Condition" : { "StringEquals" : { "aws:username" : "johndoe" }} + "Condition" : { "StringEquals" : { "aws:username" : "john" }} @@ -21 +21 @@ Context key _names_ are not case-sensitive. For example, including the `aws:Sour -The following condition uses the [StringEqualsIgnoreCase](./reference_policies_elements_condition_operators.html#Conditions_String) operator to match users named `johndoe` or `JohnDoe`. +The following condition uses the [StringEqualsIgnoreCase](./reference_policies_elements_condition_operators.html#Conditions_String) operator to match users named `john` or `John`. @@ -24 +24 @@ The following condition uses the [StringEqualsIgnoreCase](./reference_policies_e - "Condition" : { "StringEqualsIgnoreCase" : { "aws:username" : "johndoe" }} + "Condition" : { "StringEqualsIgnoreCase" : { "aws:username" : "john" }} @@ -63 +63 @@ The following example shows a representation of the request context when Martha - Resource: **arn:aws:iam::user/martha_rivera** + Resource: **arn:aws:iam::user/martha** @@ -65 +65 @@ The following example shows a representation of the request context when Martha - – aws:UserId=AROA123456789EXAMPLE:martha_rivera + – aws:UserId=AROA123456789EXAMPLE:martha @@ -117 +117 @@ The following example shows the basic format of a `Condition` element: - "Condition": {"StringLike": {"s3:prefix": ["janedoe/*"]}} + "Condition": {"StringLike": {"s3:prefix": ["jane/*"]}} @@ -119 +119 @@ The following example shows the basic format of a `Condition` element: -A value from the request is represented by a context key, in this case `s3:prefix`. The context key value is compared to a value that you specify as a literal value, such as `janedoe/*`. The type of comparison to make is specified by the [condition operator](./reference_policies_elements_condition_operators.html) (here, `StringLike`). You can create conditions that compare strings, dates, numbers, and more using typical Boolean comparisons such as equals, greater than, and less than. When you use [string operators](./reference_policies_elements_condition_operators.html#Conditions_String) or [ARN operators](./reference_policies_elements_condition_operators.html#Conditions_ARN), you can also use a [policy variable](./reference_policies_variables.html) in the context key value. The following example includes the `aws:username` variable. +A value from the request is represented by a context key, in this case `s3:prefix`. The context key value is compared to a value that you specify as a literal value, such as `jane/*`. The type of comparison to make is specified by the [condition operator](./reference_policies_elements_condition_operators.html) (here, `StringLike`). You can create conditions that compare strings, dates, numbers, and more using typical Boolean comparisons such as equals, greater than, and less than. When you use [string operators](./reference_policies_elements_condition_operators.html#Conditions_String) or [ARN operators](./reference_policies_elements_condition_operators.html#Conditions_ARN), you can also use a [policy variable](./reference_policies_variables.html) in the context key value. The following example includes the `aws:username` variable.