AWS workspaces documentation change
Summary
Removed S3 bucket access policy examples for WorkSpaces pools
Security assessment
Policy removal likely reflects documentation updates rather than security fixes. No explicit security context provided in changes.
Diff
diff --git a/workspaces/latest/adminguide/managing-network-vpce-iam-policy.md b/workspaces/latest/adminguide/managing-network-vpce-iam-policy.md index 07961d96a..767715999 100644 --- a//workspaces/latest/adminguide/managing-network-vpce-iam-policy.md +++ b//workspaces/latest/adminguide/managing-network-vpce-iam-policy.md @@ -14,36 +13,0 @@ Use the following policy for resources in the commercial AWS Regions. -JSON - -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "Allow-WorkSpaces-to-access-S3-buckets", - "Effect": "Allow", - "Principal": { - "AWS": "arn:aws:sts::<123456789012>:assumed-role/workspaces_DefaultRole/WorkSpacesPoolSession" - }, - "Action": [ - "s3:ListBucket", - "s3:GetObject", - "s3:PutObject", - "s3:DeleteObject", - "s3:GetObjectVersion", - "s3:DeleteObjectVersion" - ], - "Resource": [ - "arn:aws:s3:::wspool-logs-*", - "arn:aws:s3:::wspool-app-settings-*", - "arn:aws:s3:::wspool-home-folder-*" - ] - } - ] - } - - @@ -55,36 +18,0 @@ Use the following policy for resources in the commercial AWS GovCloud (US) Regio -JSON - -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "Allow-WorkSpaces-to-access-S3-buckets", - "Effect": "Allow", - "Principal": { - "AWS": "arn:aws:sts::<123456789012>:assumed-role/workspaces_DefaultRole/WorkSpacesPoolSession" - }, - "Action": [ - "s3:ListBucket", - "s3:GetObject", - "s3:PutObject", - "s3:DeleteObject", - "s3:GetObjectVersion", - "s3:DeleteObjectVersion" - ], - "Resource": [ - "arn:aws-us-gov:s3:::wspool-logs-*", - "arn:aws-us-gov:s3:::wspool-app-settings-*", - "arn:aws-us-gov:s3:::wspool-home-folder-*" - ] - } - ] - } - -