AWS datazone documentation change
Summary
Replaced inline IAM policy JSON with reference to AWS managed policy documentation
Security assessment
This is a documentation formatting change that doesn't alter security controls or introduce new security information. The policy permissions remain unchanged.
Diff
diff --git a/datazone/latest/userguide/security-iam-awsmanpol-AmazonDataZoneDomainExecutionRolePolicy.md b/datazone/latest/userguide/security-iam-awsmanpol-AmazonDataZoneDomainExecutionRolePolicy.md index ccd703476..46d3f47e5 100644 --- a//datazone/latest/userguide/security-iam-awsmanpol-AmazonDataZoneDomainExecutionRolePolicy.md +++ b//datazone/latest/userguide/security-iam-awsmanpol-AmazonDataZoneDomainExecutionRolePolicy.md @@ -11,151 +11 @@ You can attach the AmazonDataZoneDomainExecutionRolePolicy policy to your `Amazo - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "DomainExecutionRoleStatement", - "Effect": "Allow", - "Action": [ - "datazone:AcceptPredictions", - "datazone:AcceptSubscriptionRequest", - "datazone:AddEntityOwner", - "datazone:AddPolicyGrant", - "datazone:CancelMetadataGenerationRun", - "datazone:CancelSubscription", - "datazone:CreateAsset", - "datazone:CreateAssetFilter", - "datazone:CreateAssetRevision", - "datazone:CreateAssetType", - "datazone:CreateDataProduct", - "datazone:CreateDataProductRevision", - "datazone:CreateDataSource", - "datazone:CreateDomainUnit", - "datazone:CreateEnvironment", - "datazone:CreateEnvironmentBlueprint", - "datazone:CreateEnvironmentProfile", - "datazone:CreateFormType", - "datazone:CreateGlossary", - "datazone:CreateGlossaryTerm", - "datazone:CreateListingChangeSet", - "datazone:CreateProject", - "datazone:CreateProjectMembership", - "datazone:CreateRule", - "datazone:CreateSubscriptionGrant", - "datazone:CreateSubscriptionRequest", - "datazone:DeleteAsset", - "datazone:DeleteAssetFilter", - "datazone:DeleteAssetType", - "datazone:DeleteDataProduct", - "datazone:DeleteDataSource", - "datazone:DeleteDomainUnit", - "datazone:DeleteEnvironment", - "datazone:DeleteEnvironmentBlueprint", - "datazone:DeleteEnvironmentProfile", - "datazone:DeleteFormType", - "datazone:DeleteGlossary", - "datazone:DeleteGlossaryTerm", - "datazone:DeleteListing", - "datazone:DeleteProject", - "datazone:DeleteProjectMembership", - "datazone:DeleteRule", - "datazone:DeleteSubscriptionGrant", - "datazone:DeleteSubscriptionRequest", - "datazone:DeleteSubscriptionTarget", - "datazone:DeleteTimeSeriesDataPoints", - "datazone:GetAsset", - "datazone:GetAssetFilter", - "datazone:GetAssetType", - "datazone:GetDataProduct", - "datazone:GetDataSource", - "datazone:GetDataSourceRun", - "datazone:GetDomain", - "datazone:GetDomainUnit", - "datazone:GetEnvironment", - "datazone:GetEnvironmentAction", - "datazone:GetEnvironmentActionLink", - "datazone:GetEnvironmentBlueprint", - "datazone:GetEnvironmentCredentials", - "datazone:GetEnvironmentProfile", - "datazone:GetFormType", - "datazone:GetGlossary", - "datazone:GetGlossaryTerm", - "datazone:GetGroupProfile", - "datazone:GetLineageNode", - "datazone:GetListing", - "datazone:GetMetadataGenerationRun", - "datazone:GetProject", - "datazone:GetRule", - "datazone:GetSubscription", - "datazone:GetSubscriptionEligibility", - "datazone:GetSubscriptionGrant", - "datazone:GetSubscriptionRequestDetails", - "datazone:GetSubscriptionTarget", - "datazone:GetTimeSeriesDataPoint", - "datazone:GetUserProfile", - "datazone:ListAccountEnvironments", - "datazone:ListAssetFilters", - "datazone:ListAssetRevisions", - "datazone:ListDataProductRevisions", - "datazone:ListDataSourceRunActivities", - "datazone:ListDataSourceRuns", - "datazone:ListDataSources", - "datazone:ListDomainUnitsForParent", - "datazone:ListEntityOwners", - "datazone:ListEnvironmentActions", - "datazone:ListEnvironmentBlueprintConfigurationSummaries", - "datazone:ListEnvironmentBlueprintConfigurations", - "datazone:ListEnvironmentBlueprints", - "datazone:ListEnvironmentProfiles", - "datazone:ListEnvironments", - "datazone:ListGroupsForUser", - "datazone:ListLineageNodeHistory", - "datazone:ListMetadataGenerationRuns", - "datazone:ListNotifications", - "datazone:ListPolicyGrants", - "datazone:ListProjectMemberships", - "datazone:ListProjects", - "datazone:ListRules", - "datazone:ListSubscriptionGrants", - "datazone:ListSubscriptionRequests", - "datazone:ListSubscriptionTargets", - "datazone:ListSubscriptions", - "datazone:ListTimeSeriesDataPoints", - "datazone:ListWarehouseMetadata", - "datazone:RejectPredictions", - "datazone:RejectSubscriptionRequest", - "datazone:RemoveEntityOwner", - "datazone:RemovePolicyGrant", - "datazone:RevokeSubscription", - "datazone:Search", - "datazone:SearchGroupProfiles", - "datazone:SearchListings", - "datazone:SearchRules", - "datazone:SearchTypes", - "datazone:SearchUserProfiles", - "datazone:StartDataSourceRun", - "datazone:StartMetadataGenerationRun", - "datazone:UpdateAssetFilter", - "datazone:UpdateDataSource", - "datazone:UpdateDomainUnit", - "datazone:UpdateEnvironment", - "datazone:UpdateEnvironmentBlueprint", - "datazone:UpdateEnvironmentDeploymentStatus", - "datazone:UpdateEnvironmentProfile", - "datazone:UpdateGlossary", - "datazone:UpdateGlossaryTerm", - "datazone:UpdateProject", - "datazone:UpdateRule", - "datazone:UpdateSubscriptionGrantStatus", - "datazone:UpdateSubscriptionRequest" - ], - "Resource": "*" - }, - { - "Sid": "RAMResourceShareStatement", - "Effect": "Allow", - "Action": "ram:GetResourceShareAssociations", - "Resource": "*" - } - ] - } - +To view the permissions for this policy, see [AmazonDataZoneDomainExecutionRolePolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonDataZoneDomainExecutionRolePolicy.html) in the _AWS Managed Policy Reference_.