AWS Security ChangesHomeSearch

AWS IAM documentation change

Service: IAM · 2025-07-10 · Documentation low

File: IAM/latest/UserGuide/troubleshoot_policies.md

Summary

Added multiple JSON code block separators and formatting elements in policy examples

Security assessment

Changes consist of formatting improvements and code block organization without modifying security-related content or addressing vulnerabilities

Diff

diff --git a/IAM/latest/UserGuide/troubleshoot_policies.md b/IAM/latest/UserGuide/troubleshoot_policies.md
index e31da7e09..691558359 100644
--- a//IAM/latest/UserGuide/troubleshoot_policies.md
+++ b//IAM/latest/UserGuide/troubleshoot_policies.md
@@ -301,0 +302,6 @@ The policy below defines all `ec2:Describe*` actions and defines a specific reso
+JSON
+    
+
+****
+    
+    
@@ -317,0 +325,6 @@ To fix this policy, you must use `*` in the `Resource` element.
+JSON
+    
+
+****
+    
+    
@@ -331,0 +346,6 @@ The policy below defines an Amazon S3 bucket resource but does not include an S3
+JSON
+    
+
+****
+    
+    
@@ -350,0 +372,6 @@ To fix this policy to provide S3 bucket permissions, you must define S3 actions
+JSON
+    
+
+****
+    
+    
@@ -375,0 +404,6 @@ The policy below defines two Amazon S3 actions for all S3 resources, if the S3 p
+JSON
+    
+
+****
+    
+    
@@ -406,0 +442,6 @@ To fix this policy to use S3 object version tagging, you must define an S3 actio
+JSON
+    
+
+****
+    
+    
@@ -436,0 +479,6 @@ To fix this policy, create two statements. The first statement includes the acti
+JSON
+    
+
+****
+    
+    
@@ -530,0 +580,6 @@ You can, however, meet the intention of the previous example with the use of cor
+JSON
+    
+
+****
+    
+    
@@ -552,0 +609,6 @@ An IAM policy must contain only one `Statement` element, consisting of the name
+JSON
+    
+
+****
+    
+    
@@ -569,0 +633,6 @@ A value object can be an array of multiple value objects. To solve this problem,
+JSON
+    
+
+****
+    
+    
@@ -591,0 +662,6 @@ On the value side of the `Statement` name/value pair, the object must consist of
+JSON
+    
+
+****
+    
+    
@@ -619,0 +697,6 @@ In each case, the solution is to remove the incorrect extra element. For `Effect
+JSON
+    
+
+****
+    
+    
@@ -631,0 +716,6 @@ However, if the duplicate element is `Action` or `Resource`, then the resolution
+JSON
+    
+
+****
+    
+    
@@ -644,0 +736,6 @@ Each of the required elements in a `Statement` element's value object can be pre
+JSON
+    
+
+****
+    
+    
@@ -675,0 +774,6 @@ Adding a `Version` element at the top of the policy with the value `2012-10-17`,
+JSON
+    
+
+****
+    
+