AWS amazondynamodb documentation change
Summary
Corrected example policy from 'insert' to 'select' statements for index operations. Updated action from dynamodb:PartiQLInsert to dynamodb:PartiQLSelect.
Security assessment
Change fixes documentation inaccuracies in IAM policy examples. No evidence of security vulnerability; correction maintains existing security posture without introducing new security content.
Diff
diff --git a/amazondynamodb/latest/developerguide/ql-iam.md b/amazondynamodb/latest/developerguide/ql-iam.md index 25bc819d0..fc2c2f043 100644 --- a//amazondynamodb/latest/developerguide/ql-iam.md +++ b//amazondynamodb/latest/developerguide/ql-iam.md @@ -7 +7 @@ -Example: Allow all PartiQL for DynamoDB statements (Select/Insert/Update/Delete) on a tableExample: Allow PartiQL for DynamoDB select statements on a tableExample: Allow PartiQL for DynamoDB insert statements on an indexExample: Allow PartiQL for DynamoDB transactional statements only on a tableExample: Allow PartiQL for DynamoDB non-transactional reads and writes and block PartiQL transactional reads and writes transactional statements on a table.Example: Allow select statements and deny full table scan statements in PartiQL for DynamoDB +Example: Allow all PartiQL for DynamoDB statements (Select/Insert/Update/Delete) on a tableExample: Allow PartiQL for DynamoDB select statements on a tableExample: Allow PartiQL for DynamoDB select statements on an indexExample: Allow PartiQL for DynamoDB transactional statements only on a tableExample: Allow PartiQL for DynamoDB non-transactional reads and writes and block PartiQL transactional reads and writes transactional statements on a table.Example: Allow select statements and deny full table scan statements in PartiQL for DynamoDB @@ -81 +81 @@ JSON -## Example: Allow PartiQL for DynamoDB insert statements on an index +## Example: Allow PartiQL for DynamoDB select statements on an index @@ -83 +83 @@ JSON -The following IAM policy grants permissions to run the `insert` statement on a specific index. +The following IAM policy grants permissions to run the `select` statement on a specific index. @@ -98 +98 @@ JSON - "dynamodb:PartiQLInsert" + "dynamodb:PartiQLSelect"