AWS resilience-hub: Update confused deputy documentation link
Summary
Fixed URL path for IAM confused deputy documentation.
Security assessment
Corrects a link to authorization documentation but doesn't alter security guidance or address vulnerabilities.
Evidence
-The execution role must trust the AWS FIS service. The trust policy is the same for every test template. The `aws:SourceAccount` and `aws:SourceArn` conditions protect against the [confused deputy problem](https://docs.aws.amazon.com//IAM/latest/UserGuide/confused-deputy.html), so that only experiments owned by your account can assume the role.
Diff
diff --git a/resilience-hub/latest/userguide/next-gen-resilience-testing-iam-single-account.md b/resilience-hub/latest/userguide/next-gen-resilience-testing-iam-single-account.md index 27918a31d..cae6c067d 100644 --- a//resilience-hub/latest/userguide/next-gen-resilience-testing-iam-single-account.md +++ b//resilience-hub/latest/userguide/next-gen-resilience-testing-iam-single-account.md @@ -13 +13 @@ For a single-account test, create one execution role with a trust policy that al -The execution role must trust the AWS FIS service. The trust policy is the same for every test template. The `aws:SourceAccount` and `aws:SourceArn` conditions protect against the [confused deputy problem](https://docs.aws.amazon.com//IAM/latest/UserGuide/confused-deputy.html), so that only experiments owned by your account can assume the role. +The execution role must trust the AWS FIS service. The trust policy is the same for every test template. The `aws:SourceAccount` and `aws:SourceArn` conditions protect against the [confused deputy problem](https://docs.aws.amazon.com/IAM/latest/UserGuide/confused-deputy.html), so that only experiments owned by your account can assume the role.