AWS Security ChangesHomeSearch

AWS lambda documentation change

Service: lambda · 2025-02-26 · Documentation low

File: lambda/latest/dg/invocation-async-retain-records.md

Summary

Expanded S3 resource ARN in IAM policy example

Security assessment

Policy syntax improvement without security vulnerability context

Diff

diff --git a/lambda/latest/dg/invocation-async-retain-records.md
index 7a0cbfc39..12128177c 100644
--- a/lambda/latest/dg/invocation-async-retain-records.md
+++ b/lambda/latest/dg/invocation-async-retain-records.md
@@ -129 +129,4 @@ The following example shows an IAM policy that limits your function's `s3:PutObj
-                "Resource": "arn:aws:s3:::*/*",
+                "Resource": [
+                    "arn:aws:s3:::*/*",
+                    "arn:aws:s3:::*"
+                ],