AWS AmazonCloudWatch documentation change
Summary
Changed 'AWS CloudFormation' to 'CloudFormation' in policy condition example
Security assessment
The change is a minor terminology update (removing redundant 'AWS' prefix from CloudFormation service name). No security implications as it doesn't alter policy functionality or security recommendations.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/security_iam_id-based-policy-examples.md b/AmazonCloudWatch/latest/monitoring/security_iam_id-based-policy-examples.md index e16539d2d..05098db9c 100644 --- a//AmazonCloudWatch/latest/monitoring/security_iam_id-based-policy-examples.md +++ b//AmazonCloudWatch/latest/monitoring/security_iam_id-based-policy-examples.md @@ -32 +32 @@ Identity-based policies determine whether someone can create, access, or delete - * **Use conditions in IAM policies to further restrict access** – You can add a condition to your policies to limit access to actions and resources. For example, you can write a policy condition to specify that all requests must be sent using SSL. You can also use conditions to grant access to service actions if they are used through a specific AWS service, such as AWS CloudFormation. For more information, see [ IAM JSON policy elements: Condition](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition.html) in the _IAM User Guide_. + * **Use conditions in IAM policies to further restrict access** – You can add a condition to your policies to limit access to actions and resources. For example, you can write a policy condition to specify that all requests must be sent using SSL. You can also use conditions to grant access to service actions if they are used through a specific AWS service, such as CloudFormation. For more information, see [ IAM JSON policy elements: Condition](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition.html) in the _IAM User Guide_.