AWS IAM documentation change
Summary
Updated ARN format for permission boundary policies to include '/permissions-boundary/' path segment and changed date format in policy names
Security assessment
This change updates the ARN format for permission boundary policies but does not indicate any security vulnerability or incident. The change appears to be a documentation correction or format standardization for policy ARNs, not related to addressing a security issue.
Diff
diff --git a/IAM/latest/UserGuide/temporary-delegation-policy-templates.md b/IAM/latest/UserGuide/temporary-delegation-policy-templates.md index 5064ccb04..b45651e80 100644 --- a//IAM/latest/UserGuide/temporary-delegation-policy-templates.md +++ b//IAM/latest/UserGuide/temporary-delegation-policy-templates.md @@ -293 +293 @@ This includes a same-account condition to avoid granting access to queues in oth -Since this is the first version of this policy, its ARN is arn:aws:iam::partner:policy/partner.com/SQSAccessorBoundary_20250115 +Since this is the first version of this policy, its ARN is arn:aws:iam::partner:policy/permissions-boundary/partner.com/SQSAccessorBoundary_2025_01_15 @@ -318 +318 @@ The following policy template is submitted for temporary access permissions: - "iam:PermissionsBoundary": "arn:aws:iam::partner:policy/partner.com/SQSAccessorBoundary_20250115" + "iam:PermissionsBoundary": "arn:aws:iam::partner:policy/permissions-boundary/partner.com/SQSAccessorBoundary_2025_01_15" @@ -404 +404 @@ Policy template to tag pre-existing queues and create the role: - "iam:PermissionsBoundary": "arn:aws:iam::partner:policy/partner.com/SQSAccessorBoundary_20250115" + "iam:PermissionsBoundary": "arn:aws:iam::partner:policy/permissions-boundary/partner.com/SQSAccessorBoundary_2025_01_15" @@ -436 +436 @@ Updated permission boundary with additional permission: -As the second version, this policy has the ARN: arn:aws:iam::partner:policy/partner.com/SQSAccessorBoundary_2025_01_20 +As the second version, this policy has the ARN: arn:aws:iam::partner:policy/permissions-boundary/partner.com/SQSAccessorBoundary_2025_01_20 @@ -452 +452 @@ Policy template to update the permission boundary on the existing role: - "iam:PermissionsBoundary": "arn:aws:iam::partner:policy/partner.com/SQSAccessorBoundary_2025_01_20" + "iam:PermissionsBoundary": "arn:aws:iam::partner:policy/permissions-boundary/partner.com/SQSAccessorBoundary_2025_01_20"