AWS kinesisvideostreams documentation change
Summary
Removed example IAM policies for KMS permissions required by producers/consumers
Security assessment
Removal of policy examples could reduce documentation clarity for encrypting streams, but doesn't directly indicate a security fix
Diff
diff --git a/kinesisvideostreams/latest/dg/how-kms.md b/kinesisvideostreams/latest/dg/how-kms.md index bf8124661..3a66f53b8 100644 --- a//kinesisvideostreams/latest/dg/how-kms.md +++ b//kinesisvideostreams/latest/dg/how-kms.md @@ -113,21 +112,0 @@ Your Kinesis video stream producers must have the `kms:GenerateDataKey` permissi - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": [ - "kms:GenerateDataKey" - ], - "Resource": "arn:aws:kms:us-west-2:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab" - }, - { - "Effect": "Allow", - "Action": [ - "kinesis-video:PutMedia", - ], - "Resource": "arn:aws:kinesis-video:*:123456789012:MyStream" - } - ] - } - @@ -138,21 +116,0 @@ Your Kinesis video stream consumers must have the `kms:Decrypt` permission: - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": [ - "kms:Decrypt" - ], - "Resource": "arn:aws:kms:us-west-2:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab" - }, - { - "Effect": "Allow", - "Action": [ - "kinesis-video:GetMedia", - ], - "Resource": "arn:aws:kinesis-video:*:123456789012:MyStream" - } - ] - } -