AWS rekognition documentation change

Service: rekognition · 2025-08-28 · Documentation low

File: rekognition/latest/dg/cross-service-confused-deputy-prevention.md

Summary

Removed example AssumeRole policies for deputy prevention

Security assessment

Removal of trust policy examples doesn't demonstrate security remediation. No evidence of addressing active vulnerabilities.

Diff

diff --git a/rekognition/latest/dg/cross-service-confused-deputy-prevention.md b/rekognition/latest/dg/cross-service-confused-deputy-prevention.md
index bff0afb60..dd4727e57 100644
--- a//rekognition/latest/dg/cross-service-confused-deputy-prevention.md
+++ b//rekognition/latest/dg/cross-service-confused-deputy-prevention.md
@@ -44,30 +43,0 @@ If you are working stored and streaming videos, you could use a policy like the
-JSON
-    
-
-****
-    
-    
-    
-    {
-       "Version":"2012-10-17",
-       "Statement":[
-          {
-             "Effect":"Allow",
-             "Principal":{
-                "Service":"rekognition.amazonaws.com",
-                "arn:aws:iam::account-id:user/user-name"
-             },
-             "Action":"sts:AssumeRole",
-             "Condition":{
-                "StringEquals":{
-                   "aws:SourceAccount":"Account ID"
-                },
-                "ArnLike":{
-                   "aws:SourceArn":"arn:aws:rekognition:region:111122223333:streamprocessor/*"
-                }
-             }
-          }
-       ]
-    }
-    
-
@@ -76,28 +45,0 @@ If you are working exclusively with stored video, you could use a policy like th
-JSON
-    
-
-****
-    
-    
-    
-    {
-       "Version":"2012-10-17",
-       "Statement":[
-          {
-             "Effect":"Allow",
-             "Principal":{
-                "Service":"rekognition.amazonaws.com",
-                "AWS":"arn:${Partition}:iam::${123456789012}:user/${UserNameWithPath}"
-             },
-             "Action":"sts:AssumeRole",
-             "Condition":{
-                "StringEquals":{
-                   "aws:SourceAccount":"123456789012"
-                }
-             }
-          }
-       ]
-    }
-    
-    
-