AWS datazone documentation change
Summary
Restricted data product deletion permissions to project owners/contributors from generic 'any user with permissions'
Security assessment
Enhanced documentation about deletion privileges without citing a specific vulnerability. Improves security posture documentation by specifying authorization requirements.
Diff
diff --git a/datazone/latest/userguide/delete-data-product.md b/datazone/latest/userguide/delete-data-product.md index b5e31f4e3..14c726a68 100644 --- a//datazone/latest/userguide/delete-data-product.md +++ b//datazone/latest/userguide/delete-data-product.md @@ -9 +9 @@ Amazon DataZone enables data producers to group data assets into well-defined, s -Any Amazon DataZone user with the required permissions to access the data portal can delete an Amazon DataZone data product. +To delete a data product, you must be the owner or the contributor of the project to which the data product belongs.