AWS AmazonS3 documentation change
Summary
Removed s3:PutObject permission from Batch Operations IAM policy example.
Security assessment
Permission reduction follows least privilege principle but lacks evidence of addressing specific security vulnerability. Routine policy optimization without security context.
Diff
diff --git a/AmazonS3/latest/userguide/batch-ops-iam-role-policies.md b/AmazonS3/latest/userguide/batch-ops-iam-role-policies.md index d7e0015b8..505df6afc 100644 --- a//AmazonS3/latest/userguide/batch-ops-iam-role-policies.md +++ b//AmazonS3/latest/userguide/batch-ops-iam-role-policies.md @@ -573 +572,0 @@ You must attach the following permissions policy to allow Batch Operations to re - "s3:PutObject",