AWS apigateway documentation change
Summary
Removed a JSON resource policy example for IAM principal access control
Security assessment
The change removes an access control policy example but does not provide evidence of addressing a security vulnerability. Likely documentation maintenance rather than security-related update.
Diff
diff --git a/apigateway/latest/developerguide/apigateway-resource-policies-create-attach.md b/apigateway/latest/developerguide/apigateway-resource-policies-create-attach.md index 21b602296..44e10579c 100644 --- a//apigateway/latest/developerguide/apigateway-resource-policies-create-attach.md +++ b//apigateway/latest/developerguide/apigateway-resource-policies-create-attach.md @@ -152,27 +151,0 @@ In your resource policy, if you set the Principal to an AWS principal, such as t -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Principal": { - "AWS": [ - "arn:aws:iam::111111111111:role/developer", - "arn:aws:iam::111111111111:role/Admin" - ] - }, - "Action": "execute-api:Invoke", - "Resource": [ - "execute-api:/stage/GET/pets" - ] - } - ] - } - -