AWS healthimaging documentation change
Summary
Removed JSON example of IAM trust policy with confused deputy prevention conditions
Security assessment
Example removal does not affect security guidance. No indication of security flaws being resolved.
Diff
diff --git a/healthimaging/latest/devguide/getting-started-setting-up.md b/healthimaging/latest/devguide/getting-started-setting-up.md index 658cb90ec..283a15faa 100644 --- a//healthimaging/latest/devguide/getting-started-setting-up.md +++ b//healthimaging/latest/devguide/getting-started-setting-up.md @@ -217,28 +216,0 @@ The `Condition` block in this trust policy helps prevent the confused deputy pro -JSON - - -**** - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Principal": { - "Service": "medical-imaging.amazonaws.com" - }, - "Action": "sts:AssumeRole", - "Condition": { - "StringEquals": { - "aws:SourceAccount": "accountId" - }, - "ArnEquals": { - "aws:SourceArn": "arn:aws:medical-imaging:us-east-1:accountId:datastore/datastoreId" - } - } - } - ] - } - -