AWS Security ChangesHomeSearch

AWS workspaces documentation change

Service: workspaces · 2025-08-28 · Documentation low

File: workspaces/latest/adminguide/managing-network-vpce-iam-policy.md

Summary

Removed S3 bucket access policy examples for WorkSpaces pools

Security assessment

Policy removal likely reflects documentation updates rather than security fixes. No explicit security context provided in changes.

Diff

diff --git a/workspaces/latest/adminguide/managing-network-vpce-iam-policy.md b/workspaces/latest/adminguide/managing-network-vpce-iam-policy.md
index 07961d96a..767715999 100644
--- a//workspaces/latest/adminguide/managing-network-vpce-iam-policy.md
+++ b//workspaces/latest/adminguide/managing-network-vpce-iam-policy.md
@@ -14,36 +13,0 @@ Use the following policy for resources in the commercial AWS Regions.
-JSON
-
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Sid": "Allow-WorkSpaces-to-access-S3-buckets",
-                "Effect": "Allow",
-                "Principal": {
-                    "AWS": "arn:aws:sts::<123456789012>:assumed-role/workspaces_DefaultRole/WorkSpacesPoolSession"
-                },
-                "Action": [
-                    "s3:ListBucket",
-                    "s3:GetObject",
-                    "s3:PutObject",
-                    "s3:DeleteObject",
-                    "s3:GetObjectVersion",
-                    "s3:DeleteObjectVersion"
-                ],
-                "Resource": [
-                    "arn:aws:s3:::wspool-logs-*",
-                    "arn:aws:s3:::wspool-app-settings-*",
-                    "arn:aws:s3:::wspool-home-folder-*"
-                ]
-            }
-        ]
-    }
-    
-
@@ -55,36 +18,0 @@ Use the following policy for resources in the commercial AWS GovCloud (US) Regio
-JSON
-
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Sid": "Allow-WorkSpaces-to-access-S3-buckets",
-                "Effect": "Allow",
-                "Principal": {
-                    "AWS": "arn:aws:sts::<123456789012>:assumed-role/workspaces_DefaultRole/WorkSpacesPoolSession"
-                },
-                "Action": [
-                    "s3:ListBucket",
-                    "s3:GetObject",
-                    "s3:PutObject",
-                    "s3:DeleteObject",
-                    "s3:GetObjectVersion",
-                    "s3:DeleteObjectVersion"
-                ],
-                "Resource": [
-                    "arn:aws-us-gov:s3:::wspool-logs-*",
-                    "arn:aws-us-gov:s3:::wspool-app-settings-*",
-                    "arn:aws-us-gov:s3:::wspool-home-folder-*"
-                ]
-            }
-        ]
-    }
-    
-