AWS resource-explorer medium security documentation change

Service: resource-explorer · 2025-08-13 · Security-related medium

File: resource-explorer/latest/userguide/aws-managed-views.md

Summary

Corrected JSON syntax in policy examples and removed 'DeleteManagedView' permission from allowed actions

Security assessment

Removal of 'resource-explorer-2:DeleteManagedView' action enforces least privilege by reducing unnecessary permissions, which directly improves security posture.

Diff

diff --git a/resource-explorer/latest/userguide/aws-managed-views.md b/resource-explorer/latest/userguide/aws-managed-views.md
index 4da28a7e6..6a6fb3244 100644
--- a//resource-explorer/latest/userguide/aws-managed-views.md
+++ b//resource-explorer/latest/userguide/aws-managed-views.md
@@ -36,2 +36,2 @@ JSON
-      Version:"2012-10-17",
-      Statement:[
+      "Version": "2012-10-17",
+      "Statement": [
@@ -39,4 +39,4 @@ JSON
-          Sid:"view_UUID_ACCESS_TO_SERVICE_PRINCIPAL",
-          Effect:"Allow",
-          Principal:{
-            Service:"sampleservice.amazonaws.com"
+      "Sid": "view_UUID_ACCESS_TO_SERVICE_PRINCIPAL",
+      "Effect": "Allow",
+      "Principal": {
+      "Service": "sampleservice.amazonaws.com"
@@ -44 +44 @@ JSON
-          Action:[
+      "Action": [
@@ -46 +45,0 @@ JSON
-            "resource-explorer-2:DeleteManagedView",
@@ -49,4 +48,4 @@ JSON
-          Resource:"managed_view_ARN",
-          Condition:{
-            StringEquals:{
-              'aws:SourceAccount':"owner_accountID"
+      "Resource": "arn:aws:resource-explorer-2:us-east-1:111122223333:managed-view/ExampleManagedViewName/EXAMPLE8-90ab-cdef-fedc-EXAMPLE11111",
+      "Condition": {
+      "StringEquals": {
+      "aws:SourceAccount": "111122223333"
@@ -57,6 +56,6 @@ JSON
-          Sid:"view_UUID_DENY_ACCESS_TO_NON_SERVICE_PRINCIPAL",
-          Effect:"Deny",
-          Principal:"*",
-          Condition:{
-            'ForAllValues:StringNotEquals':{
-              'aws:PrincipalServiceNamesList':[
+      "Sid": "view_UUID_DENY_ACCESS_TO_NON_SERVICE_PRINCIPAL",
+      "Effect": "Deny",
+      "Principal": "*",
+      "Condition": {
+      "ForAllValues:StringNotEquals": {
+      "aws:PrincipalServiceNamesList": [
@@ -67 +66 @@ JSON
-          NotAction:[
+      "NotAction": [
@@ -70 +69 @@ JSON
-          Resource:"managed_view_ARN"
+      "Resource": "arn:aws:resource-explorer-2:us-east-1:111122223333:managed-view/ExampleManagedViewName/EXAMPLE8-90ab-cdef-fedc-EXAMPLE11111"