AWS timestream documentation change

Service: timestream · 2025-08-28 · Documentation low

File: timestream/latest/developerguide/timestream-for-influx-security-db-secrets.md

Summary

Removed IAM policy examples for Secrets Manager integration and database instance access

Security assessment

Deletion of secret management policy examples removes guidance for secure credential rotation but doesn't address a specific security flaw. The change appears to be content removal rather than security documentation improvement.

Diff

diff --git a/timestream/latest/developerguide/timestream-for-influx-security-db-secrets.md b/timestream/latest/developerguide/timestream-for-influx-security-db-secrets.md
index 5d2e23b7e..9dd3e3daf 100644
--- a//timestream/latest/developerguide/timestream-for-influx-security-db-secrets.md
+++ b//timestream/latest/developerguide/timestream-for-influx-security-db-secrets.md
@@ -113,38 +112,0 @@ Replace all items listed below in the IAM policy with values from your AWS accou
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Action": [
-                    "secretsmanager:DescribeSecret",
-                    "secretsmanager:GetSecretValue",
-                    "secretsmanager:PutSecretValue",
-                    "secretsmanager:UpdateSecretVersionStage"
-                ],
-    	    "Resource": "{rotating_secret_arn}"
-            },
-            {
-                "Effect": "Allow",
-                "Action": [
-                    "secretsmanager:GetRandomPassword"
-                ],
-                "Resource": "*"
-            },
-            {
-                "Action": [
-                    "timestream-influxdb:GetDbInstance"
-                ],
-    	    "Resource": "{db_instance_arn}",
-                "Effect": "Allow"
-            }
-        ]
-    }
-    
-
@@ -176,45 +137,0 @@ Replace all items listed below in the IAM policy with values from your AWS accou
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Action": [
-                    "secretsmanager:DescribeSecret",
-                    "secretsmanager:GetSecretValue",
-                    "secretsmanager:PutSecretValue",
-                    "secretsmanager:UpdateSecretVersionStage"
-                ],
-    	    "Resource": "{rotating_secret_arn}"
-            },
-            {
-                "Effect": "Allow",
-                "Action": [
-                    "secretsmanager:GetSecretValue"
-                ],
-    	    "Resource": "{authentication_properties_admin_secret_arn}"
-            },
-            {
-                "Effect": "Allow",
-                "Action": [
-                    "secretsmanager:GetRandomPassword"
-                ],
-                "Resource": "*"
-            },
-            {
-                "Action": [
-                    "timestream-influxdb:GetDbInstance"
-                ],
-    	    "Resource": "{db_instance_arn}",
-                "Effect": "Allow"
-            }
-        ]
-    }
-    
-