AWS wickr documentation change
Summary
Reworded explanations of identity-based policies and their categories (inline vs managed) for clarity
Security assessment
Editorial changes to improve readability of policy documentation. No security-related content was added or modified in a way that addresses vulnerabilities.
Diff
diff --git a/wickr/latest/adminguide-classic/security_iam_access-manage-id-based-policies.md b/wickr/latest/adminguide-classic/security_iam_access-manage-id-based-policies.md index b3e375c54..89de4c638 100644 --- a//wickr/latest/adminguide-classic/security_iam_access-manage-id-based-policies.md +++ b//wickr/latest/adminguide-classic/security_iam_access-manage-id-based-policies.md @@ -9 +9 @@ This guide documents the classic version of the AWS Wickr administration console -Identity-based policies are JSON permissions policy documents that you can attach to an identity, such as an IAM user, group of users, or role. These policies control what actions users and roles can perform, on which resources, and under what conditions. To learn how to create an identity-based policy, see [Define custom IAM permissions with customer managed policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create.html) in the _IAM User Guide_. +Identity-based policies are JSON permissions policy documents that you attach to an identity (user, group, or role). These policies control what actions identities can perform, on which resources, and under what conditions. To learn how to create an identity-based policy, see [Define custom IAM permissions with customer managed policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create.html) in the _IAM User Guide_. @@ -11 +11 @@ Identity-based policies are JSON permissions policy documents that you can attac -Identity-based policies can be further categorized as _inline policies_ or _managed policies_. Inline policies are embedded directly into a single user, group, or role. Managed policies are standalone policies that you can attach to multiple users, groups, and roles in your AWS account. Managed policies include AWS managed policies and customer managed policies. To learn how to choose between a managed policy or an inline policy, see [Choose between managed policies and inline policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies-choosing-managed-or-inline.html) in the _IAM User Guide_. +Identity-based policies can be _inline policies_ (embedded directly into a single identity) or _managed policies_ (standalone policies attached to multiple identities). To learn how to choose between managed and inline policies, see [Choose between managed policies and inline policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies-choosing-managed-or-inline.html) in the _IAM User Guide_.