AWS IAM documentation change
Summary
Updated service name references from 'S3 Glacier' to 'Amazon Glacier' in policy simulator documentation
Security assessment
Change involves branding/naming standardization (S3 Glacier → Amazon Glacier) without altering security functionality or addressing vulnerabilities. No security implications identified.
Diff
diff --git a/IAM/latest/UserGuide/access_policies_testing-policies.md b/IAM/latest/UserGuide/access_policies_testing-policies.md index 8a788ef1f..b618496ef 100644 --- a//IAM/latest/UserGuide/access_policies_testing-policies.md +++ b//IAM/latest/UserGuide/access_policies_testing-policies.md @@ -23 +23 @@ With the IAM policy simulator, you can test and troubleshoot identity-based poli - * Test the effects of resource-based policies on IAM users that are attached to AWS resources, such as Amazon S3 buckets, Amazon SQS queues, Amazon SNS topics, or Amazon S3 Glacier vaults. To use a resource-based policy in the policy simulator for IAM users, you must include the resource in the simulation. You must also select the checkbox to include that resource's policy in the simulation. + * Test the effects of resource-based policies on IAM users that are attached to AWS resources, such as Amazon S3 buckets, Amazon SQS queues, Amazon SNS topics, or Amazon Glacier vaults. To use a resource-based policy in the policy simulator for IAM users, you must include the resource in the simulation. You must also select the checkbox to include that resource's policy in the simulation. @@ -330 +330 @@ instance, image, security-group, network-interface, subnet, volume - 9. (Optional) If you want to include a resource-based policy in your simulation, then you must first select the actions that you want to simulate on that resource in Step 6. Expand the rows for the selected actions, and type the ARN of the resource with a policy that you want to simulate. Then select **Include Resource Policy** next to the **ARN** text box. The IAM policy simulator currently supports resource-based policies from only the following services: Amazon S3 (resource-based policies only; ACLs are not currently supported), Amazon SQS, Amazon SNS, and unlocked S3 Glacier vaults (locked vaults are not currently supported). + 9. (Optional) If you want to include a resource-based policy in your simulation, then you must first select the actions that you want to simulate on that resource in Step 6. Expand the rows for the selected actions, and type the ARN of the resource with a policy that you want to simulate. Then select **Include Resource Policy** next to the **ARN** text box. The IAM policy simulator currently supports resource-based policies from only the following services: Amazon S3 (resource-based policies only; ACLs are not currently supported), Amazon SQS, Amazon SNS, and unlocked Amazon Glacier vaults (locked vaults are not currently supported). @@ -361 +361 @@ The resource you typed for this simulation does not match this service. | This -This action belongs to a service that supports special access control mechanisms in addition to resource-based policies, such as Amazon S3 ACLs or S3 Glacier vault lock policies. The policy simulator does not support these mechanisms, so the results can differ from your production environment. | **No action required.** This message is informational. In the current version, the policy simulator evaluates policies attached to users and IAM groups, and can evaluate resource-based policies for Amazon S3, Amazon SQS, Amazon SNS, and S3 Glacier. The policy simulator does not support all access control mechanisms supported by other AWS services. +This action belongs to a service that supports special access control mechanisms in addition to resource-based policies, such as Amazon S3 ACLs or Amazon Glacier vault lock policies. The policy simulator does not support these mechanisms, so the results can differ from your production environment. | **No action required.** This message is informational. In the current version, the policy simulator evaluates policies attached to users and IAM groups, and can evaluate resource-based policies for Amazon S3, Amazon SQS, Amazon SNS, and Amazon Glacier. The policy simulator does not support all access control mechanisms supported by other AWS services.