AWS cli medium security documentation change
Summary
Corrected permissions and added service-specific untagging requirements
Security assessment
Corrected permission from tag:UntagResource to tag:UntagResources and added documentation about service-specific requirements. Prevents permission misconfiguration that could allow unauthorized untagging operations.
Diff
diff --git a/cli/latest/reference/resourcegroupstaggingapi/untag-resources.md b/cli/latest/reference/resourcegroupstaggingapi/untag-resources.md index 91aee9ab8..80c8cecb8 100644 --- a//cli/latest/reference/resourcegroupstaggingapi/untag-resources.md +++ b//cli/latest/reference/resourcegroupstaggingapi/untag-resources.md @@ -15 +15 @@ - * [AWS CLI 2.31.37 Command Reference](../../index.html) » + * [AWS CLI 2.31.39 Command Reference](../../index.html) » @@ -71 +71 @@ In addition to the `tag:UntagResources` permission required by this operation, y - * `tag:UntagResource` + * `tag:UntagResources` @@ -75,0 +76,4 @@ In addition to the `tag:UntagResources` permission required by this operation, y +### Note + +In addition, some services might have specific requirements for untagging some types of resources. For example, to untag Amazon Web Services Glue Connection, you must also have the `glue:GetConnection` permission. If the expected minimum permissions don’t work, check the documentation for that service’s tagging APIs for more information. + @@ -347 +351 @@ FailedResourcesMap -> (map) - * [AWS CLI 2.31.37 Command Reference](../../index.html) » + * [AWS CLI 2.31.39 Command Reference](../../index.html) »