AWS serverless-application-model documentation change

Service: serverless-application-model · 2025-03-26 · Documentation medium

File: serverless-application-model/latest/developerguide/sam-property-api-apiauth.md

Summary

Corrected IAM ARN format documentation for CALLER_CREDENTIALS integration

Security assessment

Clarifies security-related IAM credential configuration but doesn't address a specific vulnerability

Diff

diff --git a/serverless-application-model/latest/developerguide/sam-property-api-apiauth.md b/serverless-application-model/latest/developerguide/sam-property-api-apiauth.md
index 4dbadd244..896e899f5 100644
--- a/serverless-application-model/latest/developerguide/sam-property-api-apiauth.md
+++ b/serverless-application-model/latest/developerguide/sam-property-api-apiauth.md
@@ -112 +112 @@ Sets integration credentials for all resources and methods to this value.
-`CALLER_CREDENTIALS` maps to `arn:aws:iam::*:user/*`, which uses the caller credentials to invoke the endpoint.
+`CALLER_CREDENTIALS` maps to `arn:aws:iam::`:<user>/``, which uses the caller credentials to invoke the endpoint.