AWS lexv2 documentation change
Summary
Removed JSON policy example for Amazon Connect and Lambda integration with Lex bot aliases
Security assessment
This removes a resource-based policy example but shows no evidence of addressing a security vulnerability. The example was standard documentation about cross-service access controls rather than a security fix.
Diff
diff --git a/lexv2/latest/dg/security_iam_resource-based-policy-examples.md b/lexv2/latest/dg/security_iam_resource-based-policy-examples.md index 9493ec112..5a2dfae80 100644 --- a//lexv2/latest/dg/security_iam_resource-based-policy-examples.md +++ b//lexv2/latest/dg/security_iam_resource-based-policy-examples.md @@ -282,62 +281,0 @@ The `AWS:SourceArn` is the resource ARN of the Amazon Connect service instance o -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "connect-bot-alias", - "Effect": "Allow", - "Principal": { - "Service": [ - "connect.amazonaws.com" - ] - }, - "Action": [ - "lex:RecognizeText", - "lex:StartConversation" - ], - "Resource": [ - "arn:aws:lex:us-east-1:123456789012:bot-alias/MYBOT/MYBOTALIAS" - ], - "Condition": { - "StringEquals": { - "AWS:SourceAccount": "123456789012" - }, - "ArnEquals": { - "AWS:SourceArn": "arn:aws:connect:us-east-1:123456789012:instance/instance-id" - } - } - }, - { - "Sid": "lambda-function", - "Effect": "Allow", - "Principal": { - "Service": [ - "lambda.amazonaws.com" - ] - }, - "Action": [ - "lex:RecognizeText", - "lex:StartConversation" - ], - "Resource": [ - "arn:aws:lex:us-east-1:123456789012:bot-alias/MYBOT/MYBOTALIAS" - ], - "Condition": { - "StringEquals": { - "AWS:SourceAccount": "123456789012" - }, - "ArnEquals": { - "AWS:SourceArn": "arn:aws:lambda:Region:123456789012:function/function-name" - } - } - } - ] - } - -