AWS AWSEC2 documentation change
Summary
Removed redundant JSON code blocks and section separators (****) from multiple policy examples. Updated instance ARN placeholders to specific instance IDs in one policy example.
Security assessment
The changes primarily involve formatting cleanup by removing redundant JSON syntax blocks and section dividers. The instance ID update replaces placeholder values with concrete examples but does not address security vulnerabilities or introduce security controls. No evidence of patching security flaws or mitigating vulnerabilities in the diff.
Diff
diff --git a/AWSEC2/latest/UserGuide/ExamplePolicies_EC2.md b/AWSEC2/latest/UserGuide/ExamplePolicies_EC2.md index 7c60489d4..fdf6d7814 100644 --- a//AWSEC2/latest/UserGuide/ExamplePolicies_EC2.md +++ b//AWSEC2/latest/UserGuide/ExamplePolicies_EC2.md @@ -52,6 +51,0 @@ Users don't have permission to perform any actions on the resources (unless anot -JSON - - -**** - - @@ -75,6 +67,0 @@ The following policy denies users permission to use all Amazon EC2 API actions u -JSON - - -**** - - @@ -101,6 +86,0 @@ Alternatively, you can use the condition key `ec2:Region`, which is specific to -JSON - - -**** - - @@ -142,6 +120,0 @@ The users don't have permission to use any other API actions (unless another sta -JSON - - -**** - - @@ -181,6 +152,0 @@ The third statement allows users to terminate all instances in the US East (N. V -JSON - - -**** - - @@ -203,2 +169,2 @@ JSON - "arn:aws:ec2:us-east-1:account-id:instance/", - "arn:aws:ec2:us-east-1:account-id:instance/" + "arn:aws:ec2:us-east-1:account-id:instance/i-1234567890abcdef0", + "arn:aws:ec2:us-east-1:account-id:instance/i-0598c7d356eba48d7" @@ -255,6 +219,0 @@ The following policy allows users to launch instances using only the specified A -JSON - - -**** - - @@ -285,6 +242,0 @@ Alternatively, the following policy allows users to launch instances from all AM -JSON - - -**** - - @@ -327,6 +277,0 @@ The following policy allows users to launch instances using only the `t2.micro` -JSON - - -**** - - @@ -367,6 +310,0 @@ Alternatively, you can create a policy that denies users permissions to launch a -JSON - - -**** - - @@ -410,6 +346,0 @@ The following policy allows users to launch instances using only the specified s -JSON - - -**** - - @@ -439,6 +368,0 @@ Alternatively, you could create a policy that denies users permissions to launch -JSON - - -**** - - @@ -482,6 +404,0 @@ The following policy allows users to launch instances only if the EBS volumes fo -JSON - - -**** - - @@ -528,6 +443,0 @@ For more information, see [Grant permission to tag Amazon EC2 resources during c -JSON - - -**** - - @@ -565,6 +473,0 @@ The following policy includes the `aws:RequestTag` condition key that requires u -JSON - - -**** - - @@ -624,6 +525,0 @@ The following policy uses the `ForAnyValue` modifier on the `aws:TagKeys` condit -JSON - - -**** - - @@ -682,6 +576,0 @@ In the following policy, users do not have to specify tags in the request, but i -JSON - - -**** - - @@ -721,6 +608,0 @@ To disallow anyone called tag on create for RunInstances -JSON - - -**** - - @@ -760,6 +640,0 @@ Only allow specific tags for spot-instances-request. Surprise inconsistency numb -JSON - - -**** - - @@ -805,6 +678,0 @@ In the following example, users can launch instances, but only if they use a spe -JSON - - -**** - - @@ -850,6 +716,0 @@ The `ec2:ElasticGpuType` condition key ensures that instances use either the `eg -JSON - - -**** - - @@ -899,6 +758,0 @@ In the following example, users can launch instances, but only if they use a spe -JSON - - -**** - - @@ -925,6 +777,0 @@ In this example, users can launch instances only if they use a launch template. -JSON - - -**** - - @@ -954,6 +799,0 @@ The following example policy allows user to launch instances, but only if they u -JSON - - -**** - - @@ -995,6 +833,0 @@ The following example allows users to launch instances only if they use a launch -JSON - - -**** - - @@ -1066,6 +897,0 @@ To use RunInstances to create Spot Instance requests, you can omit `spot-instanc -JSON - - -**** - - @@ -1105,6 +929,0 @@ The following policy is meant to give users the permission to launch On-Demand I -JSON - - -**** - - @@ -1149,6 +966,0 @@ If you tag a Spot Instance request on create, Amazon EC2 evaluates the `spot-ins -JSON - - -**** - - @@ -1192,6 +1002,0 @@ The first statement allows RunInstances to create the listed resources. The `spo -JSON