AWS iot documentation change
Summary
Added documentation for iot:DeleteConnection policy action
Security assessment
Documents a new authorization action for client disconnection, which relates to access control security features but doesn't address a specific vulnerability.
Diff
diff --git a/iot/latest/developerguide/iot-policy-actions.md b/iot/latest/developerguide/iot-policy-actions.md index d0b91dda9..b21f1fa40 100644 --- a//iot/latest/developerguide/iot-policy-actions.md +++ b//iot/latest/developerguide/iot-policy-actions.md @@ -15,0 +16,5 @@ Represents the permission to connect to the AWS IoT Core message broker. The `io +`iot:DeleteConnection` + + +Represents the permission to disconnect a connected MQTT client from AWS IoT Core. The `iot:DeleteConnection` permission is checked every time a request is made to forcibly disconnect a client. When you disconnect a client, AWS IoT Core closes the client's network connection and optionally cleans the session state. +