AWS transfer medium security documentation change

Service: transfer · 2025-08-28 · Security-related medium

File: transfer/latest/userguide/security_iam_troubleshoot.md

Summary

Removed JSON example of IAM policy granting iam:PassRole permissions

Security assessment

Removing an example policy that broadly allowed iam:PassRole permissions (with wildcard resource) helps prevent overprivileged configurations that could enable privilege escalation.

Diff

diff --git a/transfer/latest/userguide/security_iam_troubleshoot.md b/transfer/latest/userguide/security_iam_troubleshoot.md
index fe3a573c2..4fbdc9596 100644
--- a//transfer/latest/userguide/security_iam_troubleshoot.md
+++ b//transfer/latest/userguide/security_iam_troubleshoot.md
@@ -50,18 +49,0 @@ The following example policy contains the permission to pass a role to AWS Trans
-JSON
-    
-
-****
-    
-    
-    
-    {
-       "Version": "2012-10-17",
-       "Statement": [
-          { "Action": "iam:PassRole",
-            "Resource": "arn:aws:iam::123456789012:role/*",
-            "Effect": "Allow"
-          } 
-       ]
-    }         
-    
-