AWS ses documentation change
Summary
Removed JSON policy example for S3 bucket permissions
Security assessment
Policy example removal doesn't address a security vulnerability, though it reduces documentation about secure S3 access for suppression lists.
Diff
diff --git a/ses/latest/dg/sending-email-suppression-list.md b/ses/latest/dg/sending-email-suppression-list.md index 8ad689b30..e2cc6e494 100644 --- a//ses/latest/dg/sending-email-suppression-list.md +++ b//ses/latest/dg/sending-email-suppression-list.md @@ -502,27 +501,0 @@ When applied to an Amazon S3 bucket, the following policy gives SES permission t -JSON - - -**** - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "AllowSESGet", - "Effect": "Allow", - "Principal": { - "Service": "ses.amazonaws.com" - }, - "Action": "s3:GetObject", - "Resource": "arn:aws:s3:::BUCKET-NAME/OBJECT-NAME", - "Condition": { - "StringEquals": { - "aws:Referer": "AWSACCOUNTID" - } - } - } - ] - } - -