AWS IAM documentation change
Summary
Removed JSON policy example demonstrating SAML role trust policy with condition keys
Security assessment
Removal of a policy example does not indicate a security issue. No evidence of vulnerability remediation or security advisory in the change.
Diff
diff --git a/IAM/latest/UserGuide/id_roles_providers_saml.md b/IAM/latest/UserGuide/id_roles_providers_saml.md index 4281c2108..32feb1850 100644 --- a//IAM/latest/UserGuide/id_roles_providers_saml.md +++ b//IAM/latest/UserGuide/id_roles_providers_saml.md @@ -128,24 +127,0 @@ JSON -**** - - - - { - "Version": "2012-10-17", - "Statement": [{ - "Effect": "Allow", - "Principal": {"Federated": "arn:aws:iam::account-id:saml-provider/ExampleOrgSSOProvider"}, - "Action": "sts:AssumeRoleWithSAML", - "Condition": { - "StringEquals": { - "saml:aud": "https://us-east-1.signin.aws.amazon.com/saml", - "saml:iss": "https://openidp.feide.no" - }, - "ForAllValues:StringLike": {"saml:edupersonaffiliation": ["staff"]} - } - }] - } - - -JSON - -