AWS lexv2 documentation change
Summary
Removed multiple IAM policy examples related to Test Workbench features including logs filtering, Lex runtime access, and KMS encryption/decryption permissions
Security assessment
The changes remove existing IAM policy examples but there's no evidence this addresses a security vulnerability. The removal appears to be documentation cleanup rather than security remediation. However, deleting encryption-related policies could impact security awareness if not replaced elsewhere.
Diff
diff --git a/lexv2/latest/dg/create-iam-test-set-features.md b/lexv2/latest/dg/create-iam-test-set-features.md index f0128eab6..30ec64d3d 100644 --- a//lexv2/latest/dg/create-iam-test-set-features.md +++ b//lexv2/latest/dg/create-iam-test-set-features.md @@ -94,23 +93,0 @@ JSON -JSON - - -**** - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "TestWorkbenchLogsReadOnly", - "Effect": "Allow", - "Action": [ - "logs:FilterLogEvents" - ], - "Resource": [ - "arn:aws:logs:us-east-1:AwsAccountId:log-group:LogGroupName:*" - ] - } - ] - } - - @@ -119,25 +95,0 @@ JSON -JSON - - -**** - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "TestWorkbenchLexRuntime", - "Effect": "Allow", - "Action": [ - "lex:RecognizeText", - "lex:RecognizeUtterance", - "lex:StartConversation" - ], - "Resource": [ - "arn:aws:lex:us-east-1:AwsAccountId:bot-alias/BotId/*" - ] - } - ] - } - - @@ -146,31 +97,0 @@ JSON -JSON - - -**** - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "TestWorkbenchKmsEncryption", - "Effect": "Allow", - "Action": [ - "kms:GenerateDataKey", - "kms:Decrypt" - ], - "Resource": [ - "arn:aws:kms:us-east-1:AwsAccountId:key/KmsKeyId" - ], - "Condition": { - "StringLike": { - "kms:ViaService": [ - "s3.*.amazonaws.com" - ] - } - } - } - ] - } - - @@ -179,30 +99,0 @@ JSON -JSON - - -**** - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "TestWorkbenchKmsDecryption", - "Effect": "Allow", - "Action": [ - "kms:Decrypt" - ], - "Resource": [ - "arn:aws:kms:us-east-1:AwsAccountId:key/KmsKeyId" - ], - "Condition": { - "StringLike": { - "kms:ViaService": [ - "s3.*.amazonaws.com" - ] - } - } - } - ] - } - -