AWS datazone medium security documentation change
Summary
Changed permission requirement for adding project members from 'project owner or contributor' to 'project owner' only
Security assessment
Restricts member management to owners only (previously included contributors), implementing principle of least privilege. This directly addresses potential privilege escalation risks by reducing attack surface. Severity is medium as it prevents unauthorized access modifications.
Diff
diff --git a/datazone/latest/userguide/add-members-to-project.md b/datazone/latest/userguide/add-members-to-project.md index bb929c935..73e6dddeb 100644 --- a//datazone/latest/userguide/add-members-to-project.md +++ b//datazone/latest/userguide/add-members-to-project.md @@ -11 +11 @@ In Amazon DataZone, projects enable a group of users to collaborate on various b -You must be a project owner or contributor to add members to a project. You can add SSO groups, SSO users, or IAM principals (roles or users) as project members. +You must be a project owner to add members to a project. You can add SSO groups, SSO users, or IAM principals (roles or users) as project members.