AWS Security ChangesHomeSearch

AWS msk documentation change

Service: msk · 2025-02-26 · Documentation low

File: msk/latest/developerguide/create-iam-role.md

Summary

Updated IAM policy ARNs with specific cluster/topic patterns and security policy reference

Security assessment

Policy ARN changes appear to demonstrate more precise resource targeting but lack explicit security context. Security policy reference remains unchanged in substance.

Diff

diff --git a/msk/latest/developerguide/create-iam-role.md
index c5e6a2f6b..c6ae195f6 100644
--- a/msk/latest/developerguide/create-iam-role.md
+++ b/msk/latest/developerguide/create-iam-role.md
@@ -32 +32 @@ Replace `region` with the code of the AWS Region where you created your cluster.
-                    "arn:aws:kafka:region:Account-ID:cluster/msk-serverless-tutorial-cluster"
+                    "arn:aws:kafka:region:Account-ID:cluster/msk-serverless-tutorial-cluster/c07c74ea-5146-4a03-add1-9baa787a5b14-s3"
@@ -43 +43 @@ Replace `region` with the code of the AWS Region where you created your cluster.
-                    "arn:aws:kafka:region:Account-ID:topic/msk-serverless-tutorial-cluster"
+                    "arn:aws:kafka:region:Account-ID:topic/msk-serverless-tutorial-cluster/*"
@@ -53 +53 @@ Replace `region` with the code of the AWS Region where you created your cluster.
-                    "arn:aws:kafka:region:Account-ID:group/msk-serverless-tutorial-cluster"
+                    "arn:aws:kafka:region:Account-ID:group/msk-serverless-tutorial-cluster/*"
@@ -59 +59 @@ Replace `region` with the code of the AWS Region where you created your cluster.
-For instructions on how to write secure policies, see [IAM access control](./iam-access-control.html).
+For instructions about how to write secure policies, see [IAM access control](./iam-access-control.html).