AWS msk documentation change
Summary
Updated IAM policy ARNs with specific cluster/topic patterns and security policy reference
Security assessment
Policy ARN changes appear to demonstrate more precise resource targeting but lack explicit security context. Security policy reference remains unchanged in substance.
Diff
diff --git a/msk/latest/developerguide/create-iam-role.md index c5e6a2f6b..c6ae195f6 100644 --- a/msk/latest/developerguide/create-iam-role.md +++ b/msk/latest/developerguide/create-iam-role.md @@ -32 +32 @@ Replace `region` with the code of the AWS Region where you created your cluster. - "arn:aws:kafka:region:Account-ID:cluster/msk-serverless-tutorial-cluster" + "arn:aws:kafka:region:Account-ID:cluster/msk-serverless-tutorial-cluster/c07c74ea-5146-4a03-add1-9baa787a5b14-s3" @@ -43 +43 @@ Replace `region` with the code of the AWS Region where you created your cluster. - "arn:aws:kafka:region:Account-ID:topic/msk-serverless-tutorial-cluster" + "arn:aws:kafka:region:Account-ID:topic/msk-serverless-tutorial-cluster/*" @@ -53 +53 @@ Replace `region` with the code of the AWS Region where you created your cluster. - "arn:aws:kafka:region:Account-ID:group/msk-serverless-tutorial-cluster" + "arn:aws:kafka:region:Account-ID:group/msk-serverless-tutorial-cluster/*" @@ -59 +59 @@ Replace `region` with the code of the AWS Region where you created your cluster. -For instructions on how to write secure policies, see [IAM access control](./iam-access-control.html). +For instructions about how to write secure policies, see [IAM access control](./iam-access-control.html).