AWS Security ChangesHomeSearch

AWS clouddirectory documentation change

Service: clouddirectory · 2025-10-10 · Documentation low

File: clouddirectory/latest/developerguide/iam_auth_access_accesscontrol_overview.md

Summary

Added deprecation notice for Cloud Directory and removed example permissions policy granting Create* actions

Security assessment

The removal of the overly permissive 'Create*' policy example promotes security best practices by discouraging broad permissions, though there's no evidence of a specific vulnerability being addressed. The deprecation notice itself is not security-related.

Diff

diff --git a/clouddirectory/latest/developerguide/iam_auth_access_accesscontrol_overview.md b/clouddirectory/latest/developerguide/iam_auth_access_accesscontrol_overview.md
index 88db0135e..77e6ce4ed 100644
--- a//clouddirectory/latest/developerguide/iam_auth_access_accesscontrol_overview.md
+++ b//clouddirectory/latest/developerguide/iam_auth_access_accesscontrol_overview.md
@@ -6,0 +7,2 @@ Cloud Directory Resources and OperationsUnderstanding Resource OwnershipManaging
+Amazon Cloud Directory will no longer be open to new customers starting on November 7, 2025. For alternatives to Cloud Directory, explore [Amazon DynamoDB](https://aws.amazon.com/dynamodb/) and [Amazon Neptune](https://aws.amazon.com/neptune/). If you need help choosing the right alternative for your use case, or for any other questions, contact [AWS Support](https://aws.amazon.com/support/). 
+
@@ -90,12 +91,0 @@ The following permissions policy grants permissions to a user to run all of the
-    
-    {
-       "Version":"2017-01-11",
-       "Statement":[
-          {
-             "Effect":"Allow",
-             "Action":"clouddirectory:Create*",
-             "Resource":"*"
-          }
-       ]
-    }
-