AWS inspector medium security documentation change

Service: inspector · 2025-03-30 · Security-related medium

File: inspector/latest/user/slr-permissions.md

Summary

Changed ECS resource ARN from cluster/* to task/* in IAM policy

Security assessment

Narrows IAM permissions scope from cluster-level to task-level resources, reducing potential attack surface

Diff

diff --git a/inspector/latest/user/slr-permissions.md b/inspector/latest/user/slr-permissions.md
index cce7f7b3e..464c6b126 100644
--- a/inspector/latest/user/slr-permissions.md
+++ b/inspector/latest/user/slr-permissions.md
@@ -345 +345 @@ The role is configured with the following permissions policy.
-    			"Resource": "arn:aws:ecs:*:*:cluster/*",
+    			"Resource": "arn:aws:ecs:*:*:task/*",