AWS aws-backup documentation change
Summary
Removed a JSON policy example for IAM PassRole permissions required for EC2 restores
Security assessment
The removed example showed proper IAM PassRole configuration, but its deletion appears to be documentation simplification rather than addressing a security issue. No evidence of vulnerability remediation.
Diff
diff --git a/aws-backup/latest/devguide/security-iam-awsmanpol.md b/aws-backup/latest/devguide/security-iam-awsmanpol.md index 257ae3c23..95fa18152 100644 --- a//aws-backup/latest/devguide/security-iam-awsmanpol.md +++ b//aws-backup/latest/devguide/security-iam-awsmanpol.md @@ -315,21 +314,0 @@ For EC2 instance restores, you must also include the following permissions to la -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "AllowPassRole", - "Action": "iam:PassRole", - "Resource": "arn:aws:iam::123456789012:role/role-name", - "Effect": "Allow" - } - ] - } - - -