AWS macie high security documentation change
Summary
Removed critical details about requiring signed API requests using IAM credentials or STS temporary security credentials
Security assessment
The deleted lines specifically documented mandatory authentication requirements for API access. Removing this information could lead to insecure implementations where users might omit request signing, creating potential unauthorized access risks. This directly impacts security configurations.
Diff
diff --git a/macie/latest/user/infrastructure-security.md b/macie/latest/user/infrastructure-security.md index 4ddc8ab89..6c48d76db 100644 --- a//macie/latest/user/infrastructure-security.md +++ b//macie/latest/user/infrastructure-security.md @@ -18,2 +17,0 @@ You use AWS published API calls to access Macie through the network. Clients mus -Additionally, requests must be signed by using an access key ID and a secret access key that is associated with an IAM principal. Or you can use the [AWS Security Token Service](https://docs.aws.amazon.com/STS/latest/APIReference/welcome.html) (AWS STS) to generate temporary security credentials to sign requests. -