AWS privateca documentation change

Service: privateca · 2025-08-28 · Documentation low

File: privateca/latest/userguide/pca-rbp.md

Summary

Removed two detailed IAM policy examples for ACM Private Certificate Authority resource-based permissions

Security assessment

While IAM policies are security-related, the removal of example configurations without additional context does not indicate a security vulnerability. This appears to be documentation cleanup rather than addressing a specific security issue.

Diff

diff --git a/privateca/latest/userguide/pca-rbp.md b/privateca/latest/userguide/pca-rbp.md
index e5e0e8864..1e9addf1b 100644
--- a//privateca/latest/userguide/pca-rbp.md
+++ b//privateca/latest/userguide/pca-rbp.md
@@ -62,44 +61,0 @@ For the resource ARN, replace the following with your own values:
-JSON
-    
-
-****
-    
-    
-         {                        
-       "Version":"2012-10-17",
-       "Statement":[
-          {    
-             "Sid":"ExampleStatementID",
-             "Effect":"Allow",         
-             "Principal":{                                                                                                                                               
-                "AWS":"555555555555"                                                                                
-             },
-             "Action":[
-                "acm-pca:DescribeCertificateAuthority",
-                "acm-pca:GetCertificate",
-                "acm-pca:GetCertificateAuthorityCertificate",
-                "acm-pca:ListPermissions",
-                "acm-pca:ListTags"                                                                                   
-             ],                                                                                              
-             "Resource":"arn:aws:acm-pca:us-east-1:123456789012:certificate-authority/CA_ID/certificate/certificate_ID"
-          },
-          {
-             "Sid":"ExampleStatementID2",  
-             "Effect":"Allow",
-             "Principal":{
-                "AWS":"555555555555"
-             },
-             "Action":[
-                "acm-pca:IssueCertificate"
-             ],
-             "Resource":"arn:aws:acm-pca:us-east-1:123456789012:certificate-authority/CA_ID/certificate/certificate_ID"
-             "Condition":{
-                "StringEquals":{
-                   "acm-pca:TemplateArn":"arn:aws:acm-pca:::template/EndEntityCertificate/V1"
-                }
-             }
-          }
-       ]
-    }
-    
-
@@ -120,50 +75,0 @@ For the resource ARN, replace the following with your own values:
-JSON
-    
-
-****
-    
-    
-        {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Sid": "ExampleStatementID3",
-                "Effect": "Allow",
-                "Principal": "*",
-                "Action": "acm-pca:IssueCertificate",
-                "Resource":"arn:aws:acm-pca:us-east-1:123456789012:certificate-authority/CA_ID/certificate/certificate_ID"
-                "Condition": {
-                    "StringEquals": {
-                        "acm-pca:TemplateArn": "arn:aws:acm-pca:::template/EndEntityCertificate/V1",
-                        "aws:PrincipalOrgID": "o-a1b2c3d4z5"
-                    },
-                    "StringNotEquals": {
-                        "aws:PrincipalAccount": "111122223333"
-                    }
-                }
-            },
-            {
-                "Sid": "ExampleStatementID4",
-                "Effect": "Allow",
-                "Principal": "*",
-                "Action": [
-                    "acm-pca:DescribeCertificateAuthority",
-                    "acm-pca:GetCertificate",
-                    "acm-pca:GetCertificateAuthorityCertificate",
-                    "acm-pca:ListPermissions",
-                    "acm-pca:ListTags"
-                ],
-                "Resource":"arn:aws:acm-pca:us-east-1:123456789012:certificate-authority/CA_ID/certificate/certificate_ID"
-                "Condition": {
-                    "StringEquals": {
-                        "aws:PrincipalOrgID": "o-a1b2c3d4z5"
-                    },
-                    "StringNotEquals": {
-                        "aws:PrincipalAccount": "111122223333"
-                    }
-                }
-            }
-        ]
-    }
-    
-