AWS audit-manager documentation change

Service: audit-manager · 2025-08-28 · Documentation low

File: audit-manager/latest/userguide/security_iam_id-based-policy-examples.md

Summary

Removed multiple JSON policy examples for CloudTrail, SNS, and KMS permissions

Security assessment

The deletion of IAM policy examples reduces documentation clarity but does not indicate a resolved security vulnerability. The policies were security-related examples, but their removal does not directly address a security issue.

Diff

diff --git a/audit-manager/latest/userguide/security_iam_id-based-policy-examples.md b/audit-manager/latest/userguide/security_iam_id-based-policy-examples.md
index 6e8ce2310..4d677f051 100644
--- a//audit-manager/latest/userguide/security_iam_id-based-policy-examples.md
+++ b//audit-manager/latest/userguide/security_iam_id-based-policy-examples.md
@@ -246,22 +245,0 @@ Before you use this policy, replace the `placeholder text` with your own informa
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Action": [
-                   "cloudtrail:DeleteEventDataStore",
-                   "cloudtrail:UpdateEventDataStore"
-                ],
-                "Resource": "arn:aws:cloudtrail:::event-data-store-UUID"
-            }
-        ]
-    }
-    
-
@@ -513,29 +490,0 @@ Before using this policy, replace the `placeholder text` with your own informati
-JSON
-    
-
-****
-    
-    
-    
-    {
-      "Version": "2012-10-17",
-      "Statement": {
-          "Sid": "AllowAuditManagerToUseSNSTopic",
-          "Effect": "Allow",
-          "Principal": {
-            "Service": ".amazonaws.com"
-          },
-          "Action": "SNS:Publish",
-          "Resource": "arn:aws:sns:region:accountID:topicName",
-          "Condition": {
-            "StringEquals": {
-              "aws:SourceAccount": "accountID"
-            },
-            "ArnLike": {
-              "aws:SourceArn": "arn:aws::region:accountID:*"
-            }
-          }
-        }
-    }
-    
-
@@ -575,33 +523,0 @@ Before using this policy, replace the `placeholder text` with your own informati
-JSON
-    
-
-****
-    
-    
-    
-    {
-         "Version": "2012-10-17",
-         "Statement": {
-           "Sid": "AllowAuditManagerToUseKMSKey",
-           "Effect": "Allow",
-           "Principal": {
-               "Service": "auditmanager.amazonaws.com"
-           },
-           "Action": [
-               "kms:Decrypt",
-               "kms:GenerateDataKey"
-           ],
-           "Resource": "arn:aws:kms:region:123456789012:key/*",
-           "Condition": {
-               "StringEquals": {
-                    "aws:SourceAccount": "123456789012"
-                }
-                "ArnLike": {
-                     "aws:SourceArn": "arn:aws:sns:region:123456789012:topicName"
-                }
-          }
-        }
-      ]
-    }
-    
-