AWS iot-wireless documentation change
Summary
Removed JSON policy example enforcing tag-based restrictions on multicast group operations
Security assessment
Policy example removal reduces guidance on tag-based access controls but does not indicate a security flaw. No evidence of insecure example being corrected.
Diff
diff --git a/iot-wireless/latest/developerguide/tagging-iotwireless.md b/iot-wireless/latest/developerguide/tagging-iotwireless.md index 1d836b16f..229b97f9d 100644 --- a//iot-wireless/latest/developerguide/tagging-iotwireless.md +++ b//iot-wireless/latest/developerguide/tagging-iotwireless.md @@ -116,49 +115,0 @@ The following example policy applies two tag-based restrictions. An IAM user res -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Deny", - "Action": "iot:CreateMulticastGroup", - "Resource": "*", - "Condition": { - "StringEquals": { - "aws:RequestTag/env": "prod" - } - } - }, - { - "Effect": "Deny", - "Action": [ - "iot:CreateMulticastGroup", - "iot:UpdateMulticastGroup", - "iot:GetMulticastGroup", - "iot:ListMulticastGroups" - ], - "Resource": "*", - "Condition": { - "StringEquals": { - "aws:ResourceTag/env": "prod" - } - } - }, - { - "Effect": "Allow", - "Action": [ - "iot:CreateMulticastGroup", - "iot:UpdateMulticastGroup", - "iot:GetMulticastGroup", - "iot:ListMulticastGroups" - ], - "Resource": "*" - } - ] - } - -