AWS datazone documentation change
Summary
Fixed broken links in IAM documentation URLs and updated internal DataZone role references
Security assessment
Changes only correct URL formatting and internal references. Existing security documentation about permissions boundaries remains unchanged.
Diff
diff --git a/datazone/latest/userguide/security-iam-awsmanpol-AmazonDataZoneEnvironmentRolePermissionsBoundary.md b/datazone/latest/userguide/security-iam-awsmanpol-AmazonDataZoneEnvironmentRolePermissionsBoundary.md index 6973f065c..6a27134ae 100644 --- a//datazone/latest/userguide/security-iam-awsmanpol-AmazonDataZoneEnvironmentRolePermissionsBoundary.md +++ b//datazone/latest/userguide/security-iam-awsmanpol-AmazonDataZoneEnvironmentRolePermissionsBoundary.md @@ -9 +9 @@ -This policy is a _permissions boundary_. A permissions boundary sets the maximum permissions that an identity-based policy can grant to an IAM entity. You should not use and attach Amazon DataZone permissions boundary policies on your own. Amazon DataZone permissions boundary policies should only be attached to Amazon DataZone managed roles. For more information on permissions boundaries, see [Permissions boundaries for IAM entities](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html) in the IAM User Guide. +This policy is a _permissions boundary_. A permissions boundary sets the maximum permissions that an identity-based policy can grant to an IAM entity. You should not use and attach Amazon DataZone permissions boundary policies on your own. Amazon DataZone permissions boundary policies should only be attached to Amazon DataZone managed roles. For more information on permissions boundaries, see [Permissions boundaries for IAM entities](https://docs.aws.amazon.com//IAM/latest/UserGuide/access_policies_boundaries.html) in the IAM User Guide. @@ -11 +11 @@ This policy is a _permissions boundary_. A permissions boundary sets the maximum -When you create an environment via the Amazon DataZone data portal, Amazon DataZone applies this permissions boundary to the [IAM roles that are produced during environment creation](https://docs.aws.amazon.com/datazone/latest/userguide/roles-for-projects.html). The permissions boundary limits the scope of the roles that Amazon DataZone creates and any roles that you add. +When you create an environment via the Amazon DataZone data portal, Amazon DataZone applies this permissions boundary to the [IAM roles that are produced during environment creation](https://docs.aws.amazon.com//datazone/latest/userguide/roles-for-projects.html). The permissions boundary limits the scope of the roles that Amazon DataZone creates and any roles that you add. @@ -13 +13 @@ When you create an environment via the Amazon DataZone data portal, Amazon DataZ -Amazon DataZone uses the `AmazonDataZoneEnvironmentRolePermissionsBoundary` managed policy to limit the provisioned IAM principal to which it is attached. The principals might take the form of the [user roles](https://docs.aws.amazon.com/datazone/latest/userguide/Identitybasedroles.html) that Amazon DataZone can assume on behalf of interactive enterprise users or analytic services (AWS Glue, for example), and then conduct actions to process data such as reading and writing from Amazon S3 or running AWS Glue crawler. +Amazon DataZone uses the `AmazonDataZoneEnvironmentRolePermissionsBoundary` managed policy to limit the provisioned IAM principal to which it is attached. The principals might take the form of the [user roles](https://docs.aws.amazon.com//datazone/latest/userguide/Identitybasedroles.html) that Amazon DataZone can assume on behalf of interactive enterprise users or analytic services (AWS Glue, for example), and then conduct actions to process data such as reading and writing from Amazon S3 or running AWS Glue crawler.