AWS appsync documentation change
Summary
Removed inline policy example for DynamoDB batch operations
Security assessment
Policy example removal without security context appears to be documentation maintenance rather than security fix.
Diff
diff --git a/appsync/latest/devguide/tutorial-dynamodb-batch.md b/appsync/latest/devguide/tutorial-dynamodb-batch.md index 76d88389e..21e0f5524 100644 --- a//appsync/latest/devguide/tutorial-dynamodb-batch.md +++ b//appsync/latest/devguide/tutorial-dynamodb-batch.md @@ -74,29 +73,0 @@ For this tutorial, any role with the following inline policy will work: -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Action": [ - "dynamodb:BatchGetItem", - "dynamodb:BatchWriteItem" - ], - "Effect": "Allow", - "Resource": [ - "arn:aws:dynamodb:us-east-1:111122223333:table/Posts", - "arn:aws:dynamodb:us-east-1:table/Posts/*", - "arn:aws:dynamodb:us-east-1:111122223333:table/locationReadings", - "arn:aws:dynamodb:us-east-1:table/locationReadings/*", - "arn:aws:dynamodb:us-east-1:111122223333:table/temperatureReadings", - "arn:aws:dynamodb:us-east-1:table/temperatureReadings/*" - ] - } - ] - } - -