AWS Security ChangesHomeSearch

AWS aws-backup documentation change

Service: aws-backup · 2025-08-28 · Documentation low

File: aws-backup/latest/devguide/security-iam-awsmanpol.md

Summary

Removed a JSON policy example for IAM PassRole permissions required for EC2 restores

Security assessment

The removed example showed proper IAM PassRole configuration, but its deletion appears to be documentation simplification rather than addressing a security issue. No evidence of vulnerability remediation.

Diff

diff --git a/aws-backup/latest/devguide/security-iam-awsmanpol.md b/aws-backup/latest/devguide/security-iam-awsmanpol.md
index 257ae3c23..95fa18152 100644
--- a//aws-backup/latest/devguide/security-iam-awsmanpol.md
+++ b//aws-backup/latest/devguide/security-iam-awsmanpol.md
@@ -315,21 +314,0 @@ For EC2 instance restores, you must also include the following permissions to la
-JSON
-    
-
-****
-    
-    
-    
-    {
-      "Version": "2012-10-17",
-      "Statement": [
-        {
-          "Sid": "AllowPassRole",
-          "Action": "iam:PassRole",
-          "Resource": "arn:aws:iam::123456789012:role/role-name",
-          "Effect": "Allow"
-        }
-      ]
-    }
-    
-    
-