AWS IAM documentation change

Service: IAM · 2025-07-10 · Documentation low

File: IAM/latest/UserGuide/reference_policies_iam-condition-keys.md

Summary

Added JSON formatting blocks and section separators (****) in multiple policy examples

Security assessment

Changes appear to be formatting improvements for policy examples without altering security content or addressing vulnerabilities

Diff

diff --git a/IAM/latest/UserGuide/reference_policies_iam-condition-keys.md b/IAM/latest/UserGuide/reference_policies_iam-condition-keys.md
index 4d3c87114..895c7237e 100644
--- a//IAM/latest/UserGuide/reference_policies_iam-condition-keys.md
+++ b//IAM/latest/UserGuide/reference_policies_iam-condition-keys.md
@@ -80,0 +81,6 @@ In this example, you allow an entity to create a service-linked role if the serv
+JSON
+    
+
+****
+    
+    
@@ -108,0 +116,6 @@ In this example, you register a security key and retrieve the FIDO Level 1 plus
+JSON
+    
+
+****
+    
+    
@@ -149,0 +164,6 @@ In this example, you register a security key and retrieve the FIPS-140-2 Level 2
+JSON
+    
+
+****
+    
+    
@@ -190,0 +212,6 @@ In this example, you register a security key and retrieve the FIPS-140-3 Level 3
+JSON
+    
+
+****
+    
+    
@@ -231,0 +260,6 @@ In this example, you register a security key and retrieve the FIPS-140-3 Level 1
+JSON
+    
+
+****
+    
+    
@@ -324,0 +360,6 @@ This example shows how you might create an identity-based policy that allows del
+JSON
+    
+
+****
+    
+    
@@ -409,0 +452,8 @@ The following example policy works for non-hybrid apps that do not set the `azp`
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -432,0 +484,8 @@ The following example policy works for hybrid apps that do set the `azp` field.
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -487,0 +548,8 @@ In the following role trust policy, the `sub` condition key limits the role to t
+JSON
+
+JSON
+    
+
+****
+    
+    
@@ -1088,0 +1158,6 @@ The following example condition checks that the context provider ARN passed in t
+JSON
+    
+
+****
+    
+    
@@ -1127,0 +1204,6 @@ You can use any single-valued condition key as a [variable](./reference_policies
+JSON
+    
+
+****
+    
+    
@@ -1174,0 +1258,6 @@ The following role trust policy allows the IAM user `AdminUser` to assume a role
+JSON
+    
+
+****
+    
+