AWS serverless-application-model documentation change

Service: serverless-application-model · 2025-03-26 · Documentation medium

File: serverless-application-model/latest/developerguide/sam-property-function-apifunctionauth.md

Summary

Updated IAM ARN format documentation for CALLER_CREDENTIALS authentication

Security assessment

Improves accuracy of security credential documentation without addressing a known vulnerability

Diff

diff --git a/serverless-application-model/latest/developerguide/sam-property-function-apifunctionauth.md b/serverless-application-model/latest/developerguide/sam-property-function-apifunctionauth.md
index 65421a9c5..4562d0ad2 100644
--- a/serverless-application-model/latest/developerguide/sam-property-function-apifunctionauth.md
+++ b/serverless-application-model/latest/developerguide/sam-property-function-apifunctionauth.md
@@ -84 +84 @@ _AWS CloudFormation compatibility_ : This property is unique to AWS SAM and does
-_Additional notes_ : `CALLER_CREDENTIALS` maps to `arn:aws:iam::*:user/*`, which uses the caller credentials to invoke the endpoint.
+_Additional notes_ : `CALLER_CREDENTIALS` maps to `arn:aws:iam::`:<user>/``, which uses the caller credentials to invoke the endpoint.