AWS organizations documentation change
Summary
Corrected JSON syntax examples for Service Control Policies to improve clarity and accuracy.
Security assessment
The change fixes documentation errors in SCP JSON examples, which could prevent misconfigurations that might lead to security issues, but it does not address a specific security vulnerability or incident.
Diff
diff --git a/organizations/latest/userguide/org_troubleshoot_policies.md b/organizations/latest/userguide/org_troubleshoot_policies.md index 0e261e0f1..929aa1d62 100644 --- a//organizations/latest/userguide/org_troubleshoot_policies.md +++ b//organizations/latest/userguide/org_troubleshoot_policies.md @@ -30,7 +30 @@ AWS Organizations uses a subset of the IAM syntax and grammar. For details, see -An SCP must consist of one and only one JSON object. You denote an object by placing { } braces around it. Although you can nest other objects within a JSON object by embedding additional { } braces within the outer pair, a policy can contain only one outermost pair of { } braces. The following example is **_incorrect_** because it contains two objects at the top level (called out in `red`): - -JSON - - -**** - +An SCP must consist of one and only one JSON object. You denote an object by placing { } braces around it. Although you can nest other objects within a JSON object by embedding additional { } braces within the outer pair, a policy can contain only one outermost pair of { } braces. The following example is **_incorrect_** because it contains two objects at the top level: @@ -41,2 +35 @@ JSON - "Statement": [ - { + "Statement": { @@ -46 +39,2 @@ JSON - }, + } + } @@ -47,0 +42,2 @@ JSON + "Version": "2012-10-17", + "Statement": { @@ -52 +47,0 @@ JSON - ] @@ -84,6 +78,0 @@ An SCP must contain only one `Statement` element, consisting of the name (`State -JSON - - -**** - - @@ -93,2 +82 @@ JSON - "Statement": [ - { + "Statement": { @@ -99 +87 @@ JSON - { + "Statement": { @@ -104 +91,0 @@ JSON - ]