AWS vpc-lattice high security documentation change
Summary
Abbreviated 'Elastic Load Balancing' to 'ELB', fixed a URL path, and retained explanation of excluding permissions due to 'confused deputy' risks.
Security assessment
The change explicitly references the 'confused deputy' privilege escalation risk as the reason for excluding certain permissions in the managed policy. This directly addresses a security concern by explaining access control limitations to mitigate risks.
Diff
diff --git a/vpc-lattice/latest/ug/managed-policies.md b/vpc-lattice/latest/ug/managed-policies.md index 3fd4798aa..73bae6f90 100644 --- a//vpc-lattice/latest/ug/managed-policies.md +++ b//vpc-lattice/latest/ug/managed-policies.md @@ -29 +29 @@ This policy provides full access to Amazon VPC Lattice and limited access to oth - * Elastic Load Balancing – Retrieve information about an Application Load Balancer to register it as a target. + * ELB – Retrieve information about an Application Load Balancer to register it as a target. @@ -44 +44 @@ To view the permissions for this policy, see [VPCLatticeFullAccess](https://docs -To use other AWS services that VPC Lattice is integrated with and the entire suite of VPC Lattice features, you must have specific additional permissions. These permissions are not included in the `VPCLatticeFullAccess` managed policy because of the [confused deputy](https://docs.aws.amazon.com/IAM/latest/UserGuide/confused-deputy.html) privilege escalation risk. For more information, see [Additional required permissions for full access](./security_iam_id-based-policies.html#security_iam_id-based-policy-additional-permissions). +To use other AWS services that VPC Lattice is integrated with and the entire suite of VPC Lattice features, you must have specific additional permissions. These permissions are not included in the `VPCLatticeFullAccess` managed policy because of the [confused deputy](https://docs.aws.amazon.com//IAM/latest/UserGuide/confused-deputy.html) privilege escalation risk. For more information, see [Additional required permissions for full access](./security_iam_id-based-policies.html#security_iam_id-based-policy-additional-permissions). @@ -58 +58 @@ This policy provides read-only access to Amazon VPC Lattice and limited access t - * Elastic Load Balancing – Retrieve information about an Application Load Balancer. + * ELB – Retrieve information about an Application Load Balancer.