AWS AWSMechTurk high security documentation change
Summary
Removed SQS policy example with SecureTransport condition
Security assessment
The deleted policy enforced HTTPS transport via the aws:SecureTransport condition. Removal might lead to insecure policy configurations if not replaced with equivalent guidance.
Diff
diff --git a/AWSMechTurk/latest/AWSMturkAPI/ApiReference_NotificationReceptorAPI_SQSTransportArticle.md b/AWSMechTurk/latest/AWSMturkAPI/ApiReference_NotificationReceptorAPI_SQSTransportArticle.md index 7a58fcdd9..9d0baf14f 100644 --- a//AWSMechTurk/latest/AWSMturkAPI/ApiReference_NotificationReceptorAPI_SQSTransportArticle.md +++ b//AWSMechTurk/latest/AWSMturkAPI/ApiReference_NotificationReceptorAPI_SQSTransportArticle.md @@ -40,21 +39,0 @@ The following example policy document only creates the [SendMessage](http://docs - - { - "Version": "2012-10-17", - "Id": "arn:aws:sqs:region:aws-account-id:queue-name/MTurkOnlyPolicy", - "Statement": [ - { - "Effect": "Allow", - "Principal": { - "Service": "mturk-requester.amazonaws.com" - }, - "Action": "SQS:SendMessage", - "Resource": "arn:aws:sqs:region:aws-account-id:queue-name", - "Condition": { - "Bool": { - "aws:SecureTransport":"true" - } - } - } - ] - } -