AWS resilience-hub documentation change

Service: resilience-hub · 2025-10-25 · Documentation low

File: resilience-hub/latest/userguide/security-iam-resilience-cross-account-roles.md

Summary

Removed multiple JSON policy examples for cross-account role trust relationships and role creation outputs

Security assessment

Deleted cross-account assume role policies and role creation examples. While these relate to security configuration, there's no evidence of a specific vulnerability being addressed. The removal might simplify documentation but could reduce clarity for secure cross-account setups.

Diff

diff --git a/resilience-hub/latest/userguide/security-iam-resilience-cross-account-roles.md b/resilience-hub/latest/userguide/security-iam-resilience-cross-account-roles.md
index d68490913..fb4984c5c 100644
--- a//resilience-hub/latest/userguide/security-iam-resilience-cross-account-roles.md
+++ b//resilience-hub/latest/userguide/security-iam-resilience-cross-account-roles.md
@@ -42,15 +41,0 @@ If your resources are in different accounts, you have to create a role in each o
-        {
-      "Version": "2012-10-17",
-      "Statement": [
-        {
-          "Effect": "Allow",
-          "Principal": {
-            "AWS": [
-              "arn:aws:iam::primary_account_id:role/InvokerRoleName"
-            ]
-          },
-          "Action": "sts:AssumeRole"
-        }
-      ]
-    }
-
@@ -110,16 +94,0 @@ You can define the trust policy for the role using a separate JSON file and then
-    
-    {
-      "Version": "2012-10-17",
-      "Statement": [
-        {
-          "Effect": "Allow",
-          "Principal": {
-            "AWS": [
-              "arn:aws:iam::primary_account_id:role/InvokerRoleName"
-            ]
-          },
-          "Action": "sts:AssumeRole"
-        }
-      ]
-    }
-
@@ -133,25 +101,0 @@ You can define the trust policy for the role using a separate JSON file and then
-    
-    {
-        "Role": {
-            "Path": "/",
-            "RoleName": "AWSResilienceHubAssessmentRole2",
-            "RoleId": "AROAT2GICMEDJML6EVQRG",
-            "Arn": "arn:aws:iam::262412591366:role/AWSResilienceHubAssessmentRole2",
-            "CreateDate": "2023-08-02T07:49:23+00:00",
-            "AssumeRolePolicyDocument": {
-                "Version": "2012-10-17",
-                "Statement": [
-                    {
-                        "Effect": "Allow",
-                        "Principal": {
-                            "AWS": [
-                                "arn:aws:iam::262412591366:role/AWSResilienceHubAssessmentRole"
-                            ]
-                        },
-                        "Action": "sts:AssumeRole"
-                    }
-                ]
-            }
-        }
-    }
-