account:PutChallengeQuestions is obsolete

[eddydee123]

service-control-policy-examples/Privileged-access-controls/Deny-billing-modification-action.json at main · aws-samples/service-control-policy-examples refers to account:PutChallengeQuestions which is now obsolete (https://aws.amazon.com/about-aws/whats-new/2024/01/aws-accounts-discontinues-security-challenge-questions/?nc1=h_ls).

Pasting this SCP into the Console generates an error because of that permission, but funnily enough if I deploy it via Terraform it does indeed get deployed...

[liwadman]

Hello Eddy!

Invalid actions should still be accepted by most relevant policy types (resource policies may do their own linting at policy submission), but I se what you mean about the actions being deprecated.

If you'd like, you can open a PR to update the policy and be forever immortalized as a contributor. If you prefer not to , I can add this to our backlog and the team can update this in the not too distant future.

Best,

Liam

[SwaraGandhi]

Hi Eddy,

Policy has been updated, thank you for pointing it out.

Swara