AWS cognito documentation change
Summary
Removed mention of default inability to perform tasks via AWS Console/CLI/API from introductory paragraph about IAM policies.
Security assessment
The change simplifies the explanation of default permissions but does not introduce or address a specific security vulnerability. It removes redundant information about access methods (Console/CLI/API) while retaining the core statement about default resource modification restrictions. No evidence of a security incident or weakness being patched.
Diff
diff --git a/cognito/latest/developerguide/security_iam_id-based-policy-examples.md b/cognito/latest/developerguide/security_iam_id-based-policy-examples.md index b0b4b4a83..bcae4d6f4 100644 --- a//cognito/latest/developerguide/security_iam_id-based-policy-examples.md +++ b//cognito/latest/developerguide/security_iam_id-based-policy-examples.md @@ -9 +9 @@ Policy best practicesUsing the consoleAllow users to view their own permissionsR -By default, users and roles don't have permission to create or modify Amazon Cognito resources. They also can't perform tasks by using the AWS Management Console, AWS Command Line Interface (AWS CLI), or AWS API. To grant users permission to perform actions on the resources that they need, an IAM administrator can create IAM policies. The administrator can then add the IAM policies to roles, and users can assume the roles. +By default, users and roles don't have permission to create or modify Amazon Cognito resources. To grant users permission to perform actions on the resources that they need, an IAM administrator can create IAM policies.