AWS lex documentation change

Service: lex · 2025-10-25 · Documentation low

File: lex/latest/dg/security_iam_id-based-policy-examples.md

Summary

Removed detailed IAM policy examples for StartMigration and PostText operations, added JSON section header

Security assessment

The changes involve removing specific IAM policy examples but do not explicitly reference security vulnerabilities. While removing policy examples could theoretically reduce exposure of risky permissions, there's no concrete evidence this addresses a specific security issue.

Diff

diff --git a/lex/latest/dg/security_iam_id-based-policy-examples.md b/lex/latest/dg/security_iam_id-based-policy-examples.md
index 6a0ee1fdf..fa638cda6 100644
--- a//lex/latest/dg/security_iam_id-based-policy-examples.md
+++ b//lex/latest/dg/security_iam_id-based-policy-examples.md
@@ -123,0 +124,6 @@ This example policy grants a user in your AWS account permission to delete any b
+JSON
+    
+
+****
+    
+    
@@ -145,72 +151,0 @@ The following IAM permission policy allows a user to start migrating a bot from
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Sid": "startMigration",
-                "Effect": "Allow",
-                "Action": "lex:StartMigration",
-                "Resource": "arn:aws:lex:<Region>:<123456789012>:bot:*"
-            },
-            {
-                "Sid": "passRole",
-                "Effect": "Allow",
-                "Action": "iam:PassRole",
-                "Resource": "arn:aws:iam::<123456789012>:role/<v2 bot role>"
-            },
-            {
-                "Sid": "allowOperations",
-                "Effect": "Allow",
-                "Action": [
-                    "lex:CreateBot",
-                    "lex:CreateIntent",
-                    "lex:UpdateSlot",
-                    "lex:DescribeBotLocale",
-                    "lex:UpdateBotAlias",
-                    "lex:CreateSlotType",
-                    "lex:DeleteBotLocale",
-                    "lex:DescribeBot",
-                    "lex:UpdateBotLocale",
-                    "lex:CreateSlot",
-                    "lex:DeleteSlot",
-                    "lex:UpdateBot",
-                    "lex:DeleteSlotType",
-                    "lex:DescribeBotAlias",
-                    "lex:CreateBotLocale",
-                    "lex:DeleteIntent",
-                    "lex:StartImport",
-                    "lex:UpdateSlotType",
-                    "lex:UpdateIntent",
-                    "lex:DescribeImport",
-                    "lex:CreateCustomVocabulary",
-                    "lex:UpdateCustomVocabulary",
-                    "lex:DeleteCustomVocabulary",
-                    "lex:DescribeCustomVocabulary",
-                    "lex:DescribeCustomVocabularyMetadata"
-                ],
-                "Resource": [
-                    "arn:aws:lex:<Region>:<123456789012>:bot/*",
-                    "arn:aws:lex:<Region>:<123456789012>:bot-alias/*/*"
-                ]
-            },
-            {
-                "Sid": "showBots",
-                "Effect": "Allow",
-                "Action": [
-                    "lex:CreateUploadUrl",
-                    "lex:ListBots"
-                ],
-                "Resource": "*"
-            },
-            {
-                "Sid": "showMigrations",
-                "Effect": "Allow",
-                "Action": [
-                    "lex:GetMigration",
-                    "lex:GetMigrations"
-                ],
-                "Resource": "*"
-            }
-        ]
-    }
-
@@ -221,17 +155,0 @@ This example policy grants a user or role in your AWS account permission to use
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Action": "lex:PostText",
-                "Effect": "Allow",
-                "Resource": "*",
-                "Condition": {
-                    "StringEquals": {
-                        "lex:ResourceTag/Department": "Support"
-                    }
-                }
-            }
-        ]
-    }
-