AWS autoscaling documentation change
Summary
Removed IAM PassRole policy example for Auto Scaling service roles
Security assessment
The deletion of a service role policy example reduces documentation completeness but does not indicate a security vulnerability. The example was security-related but its removal does not address a specific security issue.
Diff
diff --git a/autoscaling/ec2/userguide/security_iam_id-based-policy-examples.md b/autoscaling/ec2/userguide/security_iam_id-based-policy-examples.md index 63fa6669d..93e89a864 100644 --- a//autoscaling/ec2/userguide/security_iam_id-based-policy-examples.md +++ b//autoscaling/ec2/userguide/security_iam_id-based-policy-examples.md @@ -366,31 +365,0 @@ The following policy grants permissions to pass the **`AWSServiceRoleForAutoScal -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": "iam:PassRole", - "Resource": "arn:aws:iam::111122223333:role/aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling_devteamkeyaccess", - "Condition": { - "StringEquals": { - "iam:PassedToService": [ - "autoscaling.amazonaws.com" - ] - }, - "ArnLike": { - "iam:AssociatedResourceARN": [ - "arn:aws:autoscaling:region:111122223333:autoScalingGroup:*:autoScalingGroupName/devteam-*" - ] - } - } - } - ] - } - -