AWS appsync documentation change
Summary
Changed 'AWS CloudFormation' to 'CloudFormation' in IAM policy conditions example
Security assessment
The change is a minor terminology adjustment without altering security guidance. The recommendation to use SSL and IAM conditions remains unchanged.
Diff
diff --git a/appsync/latest/devguide/best-practices.md b/appsync/latest/devguide/best-practices.md index d45f51331..f8a9adb35 100644 --- a//appsync/latest/devguide/best-practices.md +++ b//appsync/latest/devguide/best-practices.md @@ -50 +50 @@ Identity-based policies determine whether someone can create, access, or delete - * **Use conditions in IAM policies to further restrict access** – You can add a condition to your policies to limit access to actions and resources. For example, you can write a policy condition to specify that all requests must be sent using SSL. You can also use conditions to grant access to service actions if they are used through a specific AWS service, such as AWS CloudFormation. For more information, see [ IAM JSON policy elements: Condition](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition.html) in the _IAM User Guide_. + * **Use conditions in IAM policies to further restrict access** – You can add a condition to your policies to limit access to actions and resources. For example, you can write a policy condition to specify that all requests must be sent using SSL. You can also use conditions to grant access to service actions if they are used through a specific AWS service, such as CloudFormation. For more information, see [ IAM JSON policy elements: Condition](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition.html) in the _IAM User Guide_.