AWS clouddirectory documentation change
Summary
Added deprecation notice for Cloud Directory and removed example permissions policy granting Create* actions
Security assessment
The removal of the overly permissive 'Create*' policy example promotes security best practices by discouraging broad permissions, though there's no evidence of a specific vulnerability being addressed. The deprecation notice itself is not security-related.
Diff
diff --git a/clouddirectory/latest/developerguide/iam_auth_access_accesscontrol_overview.md b/clouddirectory/latest/developerguide/iam_auth_access_accesscontrol_overview.md index 88db0135e..77e6ce4ed 100644 --- a//clouddirectory/latest/developerguide/iam_auth_access_accesscontrol_overview.md +++ b//clouddirectory/latest/developerguide/iam_auth_access_accesscontrol_overview.md @@ -6,0 +7,2 @@ Cloud Directory Resources and OperationsUnderstanding Resource OwnershipManaging +Amazon Cloud Directory will no longer be open to new customers starting on November 7, 2025. For alternatives to Cloud Directory, explore [Amazon DynamoDB](https://aws.amazon.com/dynamodb/) and [Amazon Neptune](https://aws.amazon.com/neptune/). If you need help choosing the right alternative for your use case, or for any other questions, contact [AWS Support](https://aws.amazon.com/support/). + @@ -90,12 +91,0 @@ The following permissions policy grants permissions to a user to run all of the - - { - "Version":"2017-01-11", - "Statement":[ - { - "Effect":"Allow", - "Action":"clouddirectory:Create*", - "Resource":"*" - } - ] - } -