AWS AmazonS3 documentation change
Summary
Removed multiple IAM policy examples including bucket policies, access point policies, and identity-based permissions
Security assessment
Elimination of policy templates from IAM security documentation reduces example availability but doesn't fix security flaws. Changes are editorial rather than vulnerability-related.
Diff
diff --git a/AmazonS3/latest/userguide/security_iam_service-with-iam.md b/AmazonS3/latest/userguide/security_iam_service-with-iam.md index 0f371598a..f62785b07 100644 --- a//AmazonS3/latest/userguide/security_iam_service-with-iam.md +++ b//AmazonS3/latest/userguide/security_iam_service-with-iam.md @@ -234,25 +233,0 @@ The following bucket policy grants the user ``Akua`` with account ``12345678901` -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "Allow Akua to list objects in the bucket", - "Effect": "Allow", - "Principal": { - "AWS": "arn:aws:iam::12345678901:user/Akua" - }, - "Action": [ - "s3:ListBucket" - ], - "Resource": "arn:aws:s3:::amzn-s3-demo-bucket" - } - ] - } - - @@ -268,25 +242,0 @@ The following access point policy grants the user ``Akua`` with account ``123456 -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "Allow Akua to list objects in the bucket through access point", - "Effect": "Allow", - "Principal": { - "AWS": "arn:aws:iam::12345678901:user/Akua" - }, - "Action": [ - "s3:ListBucket" - ], - "Resource": "arn:aws:s3:us-west-2:123456789012:accesspoint/example-access-point" - } - ] - } - - @@ -306,25 +255,0 @@ The following access point policy grants the user ``Akua`` with account ``123456 -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "Allow Akua to list objects in the bucket through access point", - "Effect": "Allow", - "Principal": { - "AWS": "arn:aws:iam::12345678901:user/Akua" - }, - "Action": [ - "s3:ListBucket" - ], - "Resource": "arn:aws:s3express:us-west-2:123456789012:accesspoint/example-access-point--usw2-az1--xa-s3" - } - ] - } - - @@ -388,25 +312,0 @@ The following access point policy grants the user ``Akua`` with account ``123456 -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "Allow Akua to get objects through access point", - "Effect": "Allow", - "Principal": { - "AWS": "arn:aws:iam::12345678901:user/Akua" - }, - "Action": [ - "s3:GetObject" - ], - "Resource": "arn:aws:s3:us-west-2:123456789012:accesspoint/example-access-point/object/*" - } - ] - } - - @@ -458,22 +357,0 @@ The following IAM identity-based policy grants the `s3:GetAccessPointPolicy` per -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "Grant permission to retrieve the access point policy of access point example-access-point", - "Effect": "Allow", - "Action": [ - "s3:GetAccessPointPolicy" - ], - "Resource": "arn:aws:s3:*:123456789012:accesspoint/example-access-point" - } - ] - } - - @@ -491,22 +368,0 @@ The following IAM identity-based policy grants the `s3express:GetAccessPointPoli -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "Grant permission to retrieve the access point policy of access point example-access-point--usw2-az1--xa-s3", - "Effect": "Allow", - "Action": [ - "s3express:CreateSession","s3express:GetAccessPointPolicy" - ], - "Resource": "arn:aws:s3:*:123456789012:accesspoint/example-access-point--usw2-az1--xa-s3" - } - ] - } - -