AWS lexv2 documentation change
Summary
Formatting updates to IAM support table (added italics) and clarified service name references in policy error descriptions
Security assessment
Changes are primarily stylistic (adding italics) and clarifying service name references in error messages. No new security controls, vulnerabilities, or security features were introduced. The updates improve documentation accuracy but don't address specific security weaknesses or add security-related content.
Diff
diff --git a/lexv2/latest/dg/security_iam_service-with-iam.md b/lexv2/latest/dg/security_iam_service-with-iam.md index 5213d7a68..dbba862d9 100644 --- a//lexv2/latest/dg/security_iam_service-with-iam.md +++ b//lexv2/latest/dg/security_iam_service-with-iam.md @@ -13,11 +13,11 @@ IAM features you can use with Amazon Lex V2 IAM feature | Amazon Lex V2 support -Identity-based policies | Yes -Resource-based policies | Yes -Policy actions | Yes -Policy resources | Yes -Policy condition keys | No -ACLs | No -ABAC (tags in policies) | Yes -Temporary credentials | No -Principal permissions | Yes -Service roles | Yes -Service-linked roles | Partial +Identity-based policies | _Yes_ +Resource-based policies | _Yes_ +Policy actions | _Yes_ +Policy resources | _Yes_ +Policy condition keys | _No_ +ACLs | _No_ +ABAC (tags in policies) | _Yes_ +Temporary credentials | _No_ +Principal permissions | _Yes_ +Service roles | _Yes_ +Service-linked roles | _Partial_ @@ -29 +29 @@ To get a high-level view of how Amazon Lex V2 and other AWS services work with m -**Supports identity-based policies:** Yes +**Supports identity-based policies:** _Yes_ @@ -41 +41 @@ To view examples of Amazon Lex V2 identity-based policies, see [Identity-based p -**Supports resource-based policies:** Yes +**Supports resource-based policies:** _Yes_ @@ -45 +45 @@ Resource-based policies are JSON policy documents that you attach to a resource. -You can't use cross-account or cross-region policies with . If you create a policy for a resource with a cross-account or cross-region ARN, returns an error. +You can't use cross-account or cross-region policies with Amazon Lex V2. If you create a policy for a resource with a cross-account or cross-region ARN, Amazon Lex V2 returns an error. @@ -47 +47 @@ You can't use cross-account or cross-region policies with . If you create a poli -The service supports resource-based policies called a _bot policy_ and a _bot alias_ policy, which are attached to a bot or a bot alias. These policies define which principals can perform actions on the bot or bot alias. +The Amazon Lex V2 service supports resource-based policies called a _bot policy_ and a _bot alias_ policy, which are attached to a bot or a bot alias. These policies define which principals can perform actions on the bot or bot alias. @@ -49 +49 @@ The service supports resource-based policies called a _bot policy_ and a _bot al -Actions can only be used on specific resources. For example, the `UpdateBot` action can only be used on bot resources, the `UpdateBotAlias` action can only be used on bot alias resources. If you specify an action in a policy that can't be used on the resource specified in the policy, returns an error. For the list of actions and the resources that they can be used with, see the following table. +Actions can only be used on specific resources. For example, the `UpdateBot` action can only be used on bot resources, the `UpdateBotAlias` action can only be used on bot alias resources. If you specify an action in a policy that can't be used on the resource specified in the policy, Amazon Lex V2 returns an error. For the list of actions and the resources that they can be used with, see the following table. @@ -126 +126 @@ To view examples of Amazon Lex V2 resource-based policies, see [Resource-based p -**Supports policy actions:** Yes +**Supports policy actions:** _Yes_ @@ -151 +151 @@ To view examples of Amazon Lex V2 identity-based policies, see [Identity-based p -**Supports policy resources:** Yes +**Supports policy resources:** _Yes_ @@ -166 +166 @@ To view examples of Amazon Lex V2 identity-based policies, see [Identity-based p -**Supports service-specific policy condition keys:** No +**Supports service-specific policy condition keys:** _No_ @@ -178 +178 @@ To view examples of Amazon Lex V2 identity-based policies, see [Identity-based p -**Supports ACLs:** No +**Supports ACLs:** _No_ @@ -184 +184 @@ Access control lists (ACLs) control which principals (account members, users, or -**Supports ABAC (tags in policies):** Yes +**Supports ABAC (tags in policies):** _Yes_ @@ -196 +196 @@ For more information about ABAC, see [Define permissions with ABAC authorization -**Supports temporary credentials:** No +**Supports temporary credentials:** _No_ @@ -202 +202 @@ Temporary credentials provide short-term access to AWS resources and are automat -**Supports forward access sessions (FAS):** Yes +**Supports forward access sessions (FAS):** _Yes_ @@ -208 +208 @@ Forward access sessions (FAS) use the permissions of the principal calling an AW -**Supports service roles:** Yes +**Supports service roles:** _Yes_ @@ -218 +218 @@ Changing the permissions for a service role might break Amazon Lex V2 functional -**Supports service-linked roles:** Partial +**Supports service-linked roles:** _Partial_