AWS iot-fleetwise documentation change
Summary
Removed multiple JSON policy examples related to AWS IoT FleetWise permissions for message publishing, S3 bucket access, Timestream data writing, and command payload generation
Security assessment
The changes remove existing policy examples but do not indicate a security vulnerability fix. No evidence of insecure policies being corrected. Impacts documentation clarity but not direct security posture.
Diff
diff --git a/iot-fleetwise/latest/developerguide/controlling-access.md b/iot-fleetwise/latest/developerguide/controlling-access.md index b4730f5ff..b72fc7e31 100644 --- a//iot-fleetwise/latest/developerguide/controlling-access.md +++ b//iot-fleetwise/latest/developerguide/controlling-access.md @@ -120,23 +119,0 @@ Create a permissions policy to give AWS IoT FleetWise permissions to publish mes -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": [ - "iot:Publish" - ], - "Resource": [ - "topic-arn" - ] - } - ] - } - - @@ -215,45 +191,0 @@ The following bucket policy is for all campaigns in an account in an AWS Region. -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Principal": { - "Service": [ - "iotfleetwise.amazonaws.com" - ] - }, - "Action": [ - "s3:ListBucket" - ], - "Resource": "arn:aws:s3:::bucket-name" - }, - { - "Effect": "Allow", - "Principal": { - "Service": [ - "iotfleetwise.amazonaws.com" - ] - }, - "Action": [ - "s3:GetObject", - "s3:PutObject" - ], - "Resource": "arn:aws:s3:::bucket-name/*", - "Condition": { - "StringLike": { - "aws:SourceArn": "arn:aws:iotfleetwise:region:account-id:campaign/*", - "aws:SourceAccount": "account-id" - } - } - } - ] - } - - @@ -370,32 +301,0 @@ Create a permissions policy to give AWS IoT FleetWise permissions to write data -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "timestreamIngestion", - "Effect": "Allow", - "Action": [ - "timestream:WriteRecords", - "timestream:Select", - "timestream:DescribeTable" - ], - "Resource": "table-arn" - }, - { - "Sid": "timestreamDescribeEndpoint", - "Effect": "Allow", - "Action": [ - "timestream:DescribeEndpoints" - ], - "Resource": "*" - } - ] - } - - @@ -505,19 +404,0 @@ In this example, replace: -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": "iotfleetwise:GenerateCommandPayload", - "Resource": "arn:aws:iot:region:111122223333:thing/<VEHICLE_NAME>" - } - ] - } - - @@ -539,27 +419,0 @@ In this example, replace: -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "Statement1", - "Effect": "Allow", - "Action": "iotfleetwise:GenerateCommandPayload", - "Resource": "arn:aws:iot:region:111122223333:thing/<VEHICLE_NAME>", - "Condition": { - "ForAnyValue:StringEquals": { - "iotfleetwise:Signals": [ - "<SIGNAL_FQN>" - ] - } - } - } - ] - } - - @@ -581,23 +434,0 @@ In this example, replace: -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "Statement1", - "Effect": "Allow", - "Action": "iotfleetwise:GenerateCommandPayload", - "Resource": [ - "arn:aws:iot:region:111122223333:thing/<VEHICLE_NAME>", - "arn:aws:iotfleetwise:region:111122223333:state-template/<STATE_TEMPLATE_ID>" - ] - } - ] - } - - @@ -617,24 +447,0 @@ In this example, replace: -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": "iotfleetwise:GenerateCommandPayload", - "Resource": "*" - }, - { - "Effect": "Allow", - "Action": "kms:Decrypt", - "Resource": "arn:aws:kms:region:111122223333:key/<KMS_KEY_ID>" - }