AWS wickr documentation change
Summary
Removed clarification about principal specification in identity-based policies
Security assessment
Deletes explanatory note about implicit principal handling in policies but maintains core policy element references. No security vulnerability addressed.
Diff
diff --git a/wickr/latest/adminguide/security_iam_service-with-iam-id-based-policies.md b/wickr/latest/adminguide/security_iam_service-with-iam-id-based-policies.md index cf3f8de21..3625a8e87 100644 --- a//wickr/latest/adminguide/security_iam_service-with-iam-id-based-policies.md +++ b//wickr/latest/adminguide/security_iam_service-with-iam-id-based-policies.md @@ -15 +15 @@ Identity-based policies are JSON permissions policy documents that you can attac -With IAM identity-based policies, you can specify allowed or denied actions and resources as well as the conditions under which actions are allowed or denied. You can't specify the principal in an identity-based policy because it applies to the user or role to which it is attached. To learn about all of the elements that you can use in a JSON policy, see [IAM JSON policy elements reference](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html) in the _IAM User Guide_. +With IAM identity-based policies, you can specify allowed or denied actions and resources as well as the conditions under which actions are allowed or denied. To learn about all of the elements that you can use in a JSON policy, see [IAM JSON policy elements reference](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html) in the _IAM User Guide_.