AWS lake-formation documentation change
Summary
Removed inline JSON policy examples for IAM roles
Security assessment
Removal of example policies does not indicate a security issue. This is likely documentation cleanup without security implications.
Diff
diff --git a/lake-formation/latest/dg/connect-data-source-prerequisites.md b/lake-formation/latest/dg/connect-data-source-prerequisites.md index cddefaa19..c56589f04 100644 --- a//lake-formation/latest/dg/connect-data-source-prerequisites.md +++ b//lake-formation/latest/dg/connect-data-source-prerequisites.md @@ -29,36 +28,0 @@ The role must have `Select` or `Describe` permissions on the Amazon S3 bucket an -JSON - - -**** - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": [ - "s3:*" - ], - "Resource": [ - "s3://"+"Your_Bucket_name"+"Your_Spill_Prefix/*", - "s3://"+"Your_Bucket_name>"+"Your_Spill_Prefix" - ] - }, - { - "Sid": "lambdainvoke", - "Effect": "Allow", - "Action": "lambda:InvokeFunction", - "Resource": "lambda_function_arn" - }, - { - "Sid": "gluepolicy", - "Effect": "Allow", - "Action": "glue:*", - "Resource": "*" - } - ] - } - - - @@ -94,23 +57,0 @@ The following is an inline policy that grants this permission. Replace `<account -JSON - - -**** - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "PassRolePermissions", - "Effect": "Allow", - "Action": [ - "iam:PassRole" - ], - "Resource": [ - "arn:aws:iam::111122223333>:role/<role-name>" - ] - } - ] - } - -