AWS workspaces-web documentation change
Summary
Removed clarification that identity-based policies cannot specify principals (as they are attached to users/roles).
Security assessment
The edit removes an explanatory note about IAM policy structure but does not affect security guidance. The documentation still covers policy elements.
Diff
diff --git a/workspaces-web/latest/adminguide/security_iam_service-with-iam-id-based-policies.md b/workspaces-web/latest/adminguide/security_iam_service-with-iam-id-based-policies.md index d5a129c74..1fca1d1a5 100644 --- a//workspaces-web/latest/adminguide/security_iam_service-with-iam-id-based-policies.md +++ b//workspaces-web/latest/adminguide/security_iam_service-with-iam-id-based-policies.md @@ -13 +13 @@ Identity-based policies are JSON permissions policy documents that you can attac -With IAM identity-based policies, you can specify allowed or denied actions and resources as well as the conditions under which actions are allowed or denied. You can't specify the principal in an identity-based policy because it applies to the user or role to which it is attached. To learn about all of the elements that you can use in a JSON policy, see [IAM JSON policy elements reference](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html) in the _IAM User Guide_. +With IAM identity-based policies, you can specify allowed or denied actions and resources as well as the conditions under which actions are allowed or denied. To learn about all of the elements that you can use in a JSON policy, see [IAM JSON policy elements reference](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements.html) in the _IAM User Guide_.