AWS lambda documentation change

Service: lambda · 2025-02-26 · Documentation low

File: lambda/latest/dg/with-msk-on-failure.md

Summary

Expanded IAM policy resource ARN to include both object and bucket level permissions

Security assessment

Identical to Kafka counterpart change - modifies resource scope without explicit security context or vulnerability reference.

Diff

diff --git a/lambda/latest/dg/with-msk-on-failure.md
index c122b54b3..59bc7c6b5 100644
--- a/lambda/latest/dg/with-msk-on-failure.md
+++ b/lambda/latest/dg/with-msk-on-failure.md
@@ -105 +105,4 @@ The following example shows an IAM policy that limits your function's `s3:PutObj
-                "Resource": "arn:aws:s3:::*/*",
+                "Resource": [
+                    "arn:aws:s3:::*/*",
+                    "arn:aws:s3:::*"
+                ],