AWS Security ChangesHomeSearch

AWS ground-station documentation change

Service: ground-station · 2025-08-28 · Documentation low

File: ground-station/latest/ug/how-it-works.dataflow-endpoint-group.md

Summary

Removed JSON examples of IAM trust policy and network interface permissions for dataflow endpoint groups

Security assessment

Policy examples were removed without security context. No evidence this addresses a security issue or enhances security documentation.

Diff

diff --git a/ground-station/latest/ug/how-it-works.dataflow-endpoint-group.md b/ground-station/latest/ug/how-it-works.dataflow-endpoint-group.md
index 412d456f9..58a8eee93 100644
--- a//ground-station/latest/ug/how-it-works.dataflow-endpoint-group.md
+++ b//ground-station/latest/ug/how-it-works.dataflow-endpoint-group.md
@@ -87,29 +86,0 @@ For more information on how to update a role's trust policy, see [Managing IAM r
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Principal": {
-                    "Service": "groundstation.amazonaws.com"
-                },
-                "Action": "sts:AssumeRole",
-                "Condition": {
-                    "StringEquals": {
-                        "aws:SourceAccount": "your-account-id"
-                    },
-                    "ArnLike": {
-                        "aws:SourceArn": "arn:aws:groundstation:us-east-1:your-account-id:dataflow-endpoint-group/your-endpoint-id"
-                    }
-                }
-            }
-        ]
-    }
-    
-
@@ -118,27 +88,0 @@ For more information on how to update or attach a role policy, see [Managing IAM
-JSON
-    
-
-****
-    
-    
-    
-    {
-      "Version": "2012-10-17",
-      "Statement": [
-        {
-          "Effect": "Allow",
-          "Action": [
-            "ec2:CreateNetworkInterface",
-            "ec2:DeleteNetworkInterface",
-            "ec2:CreateNetworkInterfacePermission",
-            "ec2:DeleteNetworkInterfacePermission",
-            "ec2:DescribeSubnets",
-            "ec2:DescribeVpcs",
-            "ec2:DescribeSecurityGroups"
-          ]
-        }
-      ]
-    }
-          
-    
-