AWS awsaccountbilling medium security documentation change

Service: awsaccountbilling · 2025-10-25 · Security-related medium

File: awsaccountbilling/latest/aboutv2/migrate-iam-permissions.md

Summary

Removed JSON examples of IAM policies (AwsPortalviewAccount and AwsPortalModifyAccount) across multiple accounts. Deleted CustomerManagedPolicy configurations containing both Allow and Deny statements for aws-portal actions.

Security assessment

Removal of explicit IAM policy examples could impact security configurations. The deleted policies included security controls (Deny for ModifyAccount) and permission templates. While not a direct vulnerability fix, changes to IAM documentation could lead to misconfigurations if users relied on these examples for proper access management.

Diff

diff --git a/awsaccountbilling/latest/aboutv2/migrate-iam-permissions.md b/awsaccountbilling/latest/aboutv2/migrate-iam-permissions.md
index 3723ed53d..8dde8d948 100644
--- a//awsaccountbilling/latest/aboutv2/migrate-iam-permissions.md
+++ b//awsaccountbilling/latest/aboutv2/migrate-iam-permissions.md
@@ -455,80 +454,0 @@ You can search the file for the policy name (for example, ``YourCustomerManagedR
-    
-    [{
-            "Account": "111111111111",
-            "PolicyType": "CustomerManagedPolicy",
-            "PolicyName": "AwsPortalviewAccount",
-            "PolicyIdentifier": "arn:aws:iam::111111111111:policy/AwsPortalviewAccount",
-    
-            "PolicyDocument": {
-                "Version": "2012-10-17",		 	 	 
-                "Statement": [{
-                    "Sid": "VisualEditor0",
-                    "Effect": "Allow",
-                    "Action": [
-                        "aws-portal:ViewAccount"
-                    ],
-                    "Resource": "*"
-                }]
-            }
-        },
-    
-        {
-            "Account": "222222222222",
-            "PolicyType": "CustomerManagedPolicy",
-            "PolicyName": "AwsPortalviewAccount",
-            "PolicyIdentifier": "arn:aws:iam::222222222222:policy/AwsPortalviewAccount",
-    
-            "PolicyDocument": {
-                "Version": "2012-10-17",		 	 	 
-                "Statement": [{
-                    "Sid": "VisualEditor0",
-                    "Effect": "Allow",
-                    "Action": [
-                        "aws-portal:ViewAccount"
-                    ],
-                    "Resource": "*"
-                }]
-            }
-        },
-        {
-            "Account": "111111111111",
-            "PolicyType": "CustomerManagedPolicy",
-            "PolicyName": "AwsPortalModifyAccount",
-            "PolicyIdentifier": "arn:aws:iam::111111111111:policy/AwsPortalModifyAccount",
-    
-            "PolicyDocument": {
-    
-                "Version": "2012-10-17",		 	 	 
-                "Statement": [{
-                    "Sid": "VisualEditor0",
-                    "Effect": "Deny",
-                    "Action": [
-                        "aws-portal:ModifyAccount"
-                    ],
-                    "Resource": "*"
-                }]
-            }
-        },
-    
-        {
-            "Account": "222222222222",
-            "PolicyType": "CustomerManagedPolicy",
-            "PolicyName": "AwsPortalModifyAccount",
-            "PolicyIdentifier": "arn:aws:iam::222222222222:policy/AwsPortalModifyAccount",
-    
-            "PolicyDocument": {
-    
-                "Version": "2012-10-17",		 	 	 
-                "Statement": [{
-                    "Sid": "VisualEditor0",
-                    "Effect": "Deny",
-                    "Action": [
-                        "aws-portal:ModifyAccount"
-                    ],
-                    "Resource": "*"
-                }]
-            }
-        }
-    
-    ]
-