AWS Security ChangesHomeSearch

AWS govcloud-us documentation change

Service: govcloud-us · 2025-08-28 · Documentation low

File: govcloud-us/latest/UserGuide/govcloud-robomaker.md

Summary

Removed example IAM policies for RoboMaker simulation jobs

Security assessment

Policy examples removal doesn't indicate security fixes - likely documentation restructuring

Diff

diff --git a/govcloud-us/latest/UserGuide/govcloud-robomaker.md b/govcloud-us/latest/UserGuide/govcloud-robomaker.md
index fd4e27535..7f6fbfcdf 100644
--- a//govcloud-us/latest/UserGuide/govcloud-robomaker.md
+++ b//govcloud-us/latest/UserGuide/govcloud-robomaker.md
@@ -99,60 +98,0 @@ When you create a simulation job, it must have an IAM role with the permissions
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Action": "s3:ListBucket",
-                "Resource": [
-                    "arn:aws:s3:::amzn-s3-demo-source-bucket"
-                ],
-                "Effect": "Allow"
-            },
-            {
-                "Action": [
-                    "s3:Get*",
-                    "s3:List*"
-                ],
-                "Resource": [
-                    "arn:aws:s3:::amzn-s3-demo-source-bucket/*"
-                ],
-                "Effect": "Allow"
-            },
-            {
-                "Action": "s3:Put*",
-                "Resource": [
-                    "arn:aws:s3:::amzn-s3-demo-destination-bucket/*"
-                ],
-                "Effect": "Allow"
-            },
-            {
-                "Action": [
-                    "logs:CreateLogGroup",
-                    "logs:CreateLogStream",
-                    "logs:PutLogEvents",
-                    "logs:DescribeLogStreams"
-                ],
-                "Resource": [
-                    "arn:aws:logs:*:111122223333:log-group:/aws/robomaker/SimulationJobs*"
-                ],
-                "Effect": "Allow"
-            },
-            {
-                "Action": [
-                    "ecr:BatchGetImage",
-                    "ecr:GetAuthorizationToken",
-                    "ecr:BatchCheckLayerAvailability",
-                    "ecr:GetDownloadUrlForLayer"
-                ],
-                "Resource": "arn:aws:us-east-1:account#:repository/repository_name",
-                "Effect": "Allow"
-            }
-        ]
-    }
-    
-
@@ -161,26 +100,0 @@ The policy must be attached to a role with the following trust policy.
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": {
-            "Effect": "Allow",
-            "Principal": { "Service": "robomaker.amazonaws.com" },
-            "Action": "sts:AssumeRole",
-            "Condition": {
-                "StringEquals": {
-                    "aws:SourceAccount": "account#" // Account where the simulation job resource is created
-                },
-                "StringEquals": {
-                    "aws:SourceArn": "arn:aws:robomaker:region:account#:simulation-job/*"
-                }
-            }
-        }
-    }    
-    
-    
-