AWS govcloud-us documentation change
Summary
Removed Cognito identity provider trust policy example
Security assessment
Policy example removal affects authentication documentation but doesn't indicate remediation of a security vulnerability or addition of security guidance.
Diff
diff --git a/govcloud-us/latest/UserGuide/govcloud-cog.md b/govcloud-us/latest/UserGuide/govcloud-cog.md index 4bd7cee0d..d893d2fbd 100644 --- a//govcloud-us/latest/UserGuide/govcloud-cog.md +++ b//govcloud-us/latest/UserGuide/govcloud-cog.md @@ -36,32 +35,0 @@ For AWS GovCloud (US-East), replace `cognito-identity-us-gov.amazonaws.com` with -JSON - - -**** - - - - - { - "Version":"2012-10-17", - "Statement":[ - { - "Sid":"", - "Effect":"Allow", - "Principal":{ - "Federated":"cognito-identity-us-gov.amazonaws.com" - }, - "Action":"sts:AssumeRoleWithWebIdentity", - "Condition":{ - "StringEquals":{ - " cognito-identity-us-gov.amazonaws.com:aud":"us-gov-west-1:12345678-corner-cafe-123456790ab" - }, - "ForAnyValue:StringLike":{ - " cognito-identity-us-gov.amazonaws.com:amr":"unauthenticated" - } - } - } - ] - } - - -