AWS amazondynamodb documentation change
Summary
Clarified that Block Public Access (BPA) is automatically enforced during policy operations without separate configuration.
Security assessment
Enhances documentation of existing security feature (BPA) by explaining its automatic enforcement. No vulnerability addressed; strengthens understanding of security controls.
Diff
diff --git a/amazondynamodb/latest/developerguide/rbac-bpa-rbp.md b/amazondynamodb/latest/developerguide/rbac-bpa-rbp.md index 7fe979eea..ae0b94a10 100644 --- a//amazondynamodb/latest/developerguide/rbac-bpa-rbp.md +++ b//amazondynamodb/latest/developerguide/rbac-bpa-rbp.md @@ -9 +9 @@ -Block Public Access (BPA) is a feature that identifies and prevents the attaching of resource-based policies that grant public access to your DynamoDB tables, indexes, or streams across your [Amazon Web Services (AWS)](https://aws.amazon.com/) accounts. With BPA, you can prevent public access to your DynamoDB resources. BPA performs checks during the creation or modification of a resource-based policy and helps improve your security posture with DynamoDB. +Block Public Access (BPA) is a feature that identifies and prevents the attaching of resource-based policies that grant public access to your DynamoDB tables, indexes, or streams across your [Amazon Web Services (AWS)](https://aws.amazon.com/) accounts. With BPA, you can prevent public access to your DynamoDB resources. BPA performs checks during the creation or modification of a resource-based policy and helps improve your security posture with DynamoDB. BPA is automatically enforced during these operations; there is no separate setting or configuration to enable it.