AWS notifications medium security documentation change

Service: notifications · 2026-04-01 · Security-related medium

File: notifications/latest/userguide/resource-level-permissions.md

Summary

Removed 'iam:CreateServiceLinkedRole' permission from two JSON policy examples

Security assessment

This change removes the 'iam:CreateServiceLinkedRole' permission from example IAM policies. This appears to be a security hardening measure, as CreateServiceLinkedRole is a powerful permission that could allow privilege escalation. Removing it from example policies follows the principle of least privilege and could prevent misconfigurations that might lead to security issues.

Diff

diff --git a/notifications/latest/userguide/resource-level-permissions.md b/notifications/latest/userguide/resource-level-permissions.md
index 8ca826434..ccd833b26 100644
--- a//notifications/latest/userguide/resource-level-permissions.md
+++ b//notifications/latest/userguide/resource-level-permissions.md
@@ -159 +158,0 @@ JSON
-           "iam:CreateServiceLinkedRole",
@@ -191 +189,0 @@ JSON
-          "iam:CreateServiceLinkedRole",