AWS awscloudtrail low security documentation change
Summary
Corrected ARN casing from 'eventdataStore' to 'eventdatastore' in policy examples
Security assessment
Fixes ARN format in security policies which could prevent policy misconfigurations - addresses potential authorization issues
Diff
diff --git a/awscloudtrail/latest/userguide/cloudtrail-copy-trail-to-lake-eds.md index 4276ed01c..8880e5442 100644 --- a/awscloudtrail/latest/userguide/cloudtrail-copy-trail-to-lake-eds.md +++ b/awscloudtrail/latest/userguide/cloudtrail-copy-trail-to-lake-eds.md @@ -117 +117 @@ Replace `key-region`, `keyAccountID`, and `keyID` with the values for the KMS ke - "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdataStore/eventDataStoreId" + "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdatastore/eventDataStoreId" @@ -132 +132 @@ Replace `key-region`, `keyAccountID`, and `keyID` with the values for the KMS ke - "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdataStore/eventDataStoreId" + "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdatastore/eventDataStoreId" @@ -162 +162 @@ The following example provides the IAM trust policy, which allows CloudTrail to - "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdataStore/eventDataStoreId" + "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdatastore/eventDataStoreId" @@ -222 +222 @@ The following example provides the KMS key policy, which allows CloudTrail to de - "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdataStore/eventDataStoreId" + "aws:SourceArn": "arn:aws:cloudtrail:region:myAccountID:eventdatastore/eventDataStoreId"