AWS ground-station documentation change
Summary
Removed JSON examples of IAM trust policy and network interface permissions for dataflow endpoint groups
Security assessment
Policy examples were removed without security context. No evidence this addresses a security issue or enhances security documentation.
Diff
diff --git a/ground-station/latest/ug/how-it-works.dataflow-endpoint-group.md b/ground-station/latest/ug/how-it-works.dataflow-endpoint-group.md index 412d456f9..58a8eee93 100644 --- a//ground-station/latest/ug/how-it-works.dataflow-endpoint-group.md +++ b//ground-station/latest/ug/how-it-works.dataflow-endpoint-group.md @@ -87,29 +86,0 @@ For more information on how to update a role's trust policy, see [Managing IAM r -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Principal": { - "Service": "groundstation.amazonaws.com" - }, - "Action": "sts:AssumeRole", - "Condition": { - "StringEquals": { - "aws:SourceAccount": "your-account-id" - }, - "ArnLike": { - "aws:SourceArn": "arn:aws:groundstation:us-east-1:your-account-id:dataflow-endpoint-group/your-endpoint-id" - } - } - } - ] - } - - @@ -118,27 +88,0 @@ For more information on how to update or attach a role policy, see [Managing IAM -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": [ - "ec2:CreateNetworkInterface", - "ec2:DeleteNetworkInterface", - "ec2:CreateNetworkInterfacePermission", - "ec2:DeleteNetworkInterfacePermission", - "ec2:DescribeSubnets", - "ec2:DescribeVpcs", - "ec2:DescribeSecurityGroups" - ] - } - ] - } - - -