AWS kinesisvideostreams documentation change
Summary
Removed example IAM policies and SNS access policies
Security assessment
Removes cross-account notification configuration examples without evidence of security vulnerability resolution
Diff
diff --git a/kinesisvideostreams/latest/dg/notifications.md b/kinesisvideostreams/latest/dg/notifications.md index 0113ffe9c..714158992 100644 --- a//kinesisvideostreams/latest/dg/notifications.md +++ b//kinesisvideostreams/latest/dg/notifications.md @@ -157,21 +156,0 @@ The IAM role or user that calls the `PutMedia` API must have `sns:Publish` permi - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": "kinesisvideo:PutMedia", - "Resource": "<kvs-streams-arn>" - }, - { - "Effect": "Allow", - "Action": [ - "sns:Publish" - ], - "Resource": [ - "<sns-topic-arn>" - ] - } - ] - } - @@ -182,17 +160,0 @@ The Amazon SNS topic in the destination account must have a resource-based acces - - { - "Version": "2008-10-17", - "Id": "__default_policy_ID", - "Statement": [ - { - "Sid": "__default_statement_ID", - "Effect": "Allow", - "Principal": { - "AWS": "arn:aws:iam::<kvs_streams_account_id>:root" - }, - "Action": "SNS:Publish", - "Resource": "<sns_topic_arn>" - } - ] - } -