AWS mwaa documentation change
Summary
Simplified explanation of IAM policy Action element by removing details about exceptions and dependent actions
Security assessment
The change removes explanatory text about policy action exceptions but maintains core guidance about including actions in policies. While IAM policies are security-related, this edit appears to be a documentation simplification rather than addressing a specific security vulnerability or weakness. No evidence of patching a security issue or adding new security controls.
Diff
diff --git a/mwaa/latest/userguide/security_iam_service-with-iam.md b/mwaa/latest/userguide/security_iam_service-with-iam.md index 815861d1d..7c77c50ba 100644 --- a//mwaa/latest/userguide/security_iam_service-with-iam.md +++ b//mwaa/latest/userguide/security_iam_service-with-iam.md @@ -67,3 +67 @@ Administrators can use AWS JSON policies to specify who has access to what. That -The `Action` element of a JSON policy describes the actions that you can use to allow or deny access in a policy. Policy actions usually have the same name as the associated AWS API operation. There are some exceptions, such as _permission-only actions_ that don't have a matching API operation. There are also some operations that require multiple actions in a policy. These additional actions are called _dependent actions_. - -Include actions in a policy to grant permissions to perform the associated operation. +The `Action` element of a JSON policy describes the actions that you can use to allow or deny access in a policy. Include actions in a policy to grant permissions to perform the associated operation.