AWS comprehend documentation change
Summary
Added JSON formatting blocks to policy examples for confused deputy prevention.
Security assessment
The changes improve the structure of existing security documentation (confused deputy prevention) but do not introduce new security features or address a specific vulnerability. The examples were already present but are now formatted more clearly.
Diff
diff --git a/comprehend/latest/dg/cross-service-confused-deputy-prevention.md b/comprehend/latest/dg/cross-service-confused-deputy-prevention.md index a6d3a0872..afd96606f 100644 --- a//comprehend/latest/dg/cross-service-confused-deputy-prevention.md +++ b//comprehend/latest/dg/cross-service-confused-deputy-prevention.md @@ -18,0 +19,6 @@ The following example shows how you can use the `aws:SourceAccount` global condi +JSON + + +**** + + @@ -40,0 +48,6 @@ You need to create a trust policy to create or update an endpoint for an encrypt +JSON + + +**** + + @@ -67,0 +82,6 @@ You need to create a trust policy to create a custom model. Set the `aws:SourceA +JSON + + +**** + + @@ -84,2 +104 @@ You need to create a trust policy to create a custom model. Set the `aws:SourceA - "aws:SourceArn": "arn:aws:comprehend:us-west-2:111122223333: - document-classifier/smallest-classifier-test/version/version-name" + "aws:SourceArn": "arn:aws:comprehend:us-west-2:111122223333:document-classifier/smallest-classifier-test/version/version-name"