AWS opensearch-service documentation change
Summary
Standardized placeholder 'your-account-id' to 'account-id' in policy examples
Security assessment
Formatting change to documentation examples without altering security content or addressing vulnerabilities.
Diff
diff --git a/opensearch-service/latest/developerguide/pipeline-domain-access.md b/opensearch-service/latest/developerguide/pipeline-domain-access.md index 1b2ac2de1..ee2859140 100644 --- a/opensearch-service/latest/developerguide/pipeline-domain-access.md +++ b/opensearch-service/latest/developerguide/pipeline-domain-access.md @@ -39 +39 @@ The following sample policy demonstrates the [least privilege](https://docs.aws. - "Resource": "arn:aws:es:*:your-account-id:domain/*" + "Resource": "arn:aws:es:*:account-id:domain/*" @@ -44 +44 @@ The following sample policy demonstrates the [least privilege](https://docs.aws. - "Resource": "arn:aws:es:*:your-account-id:domain/domain-name/*" + "Resource": "arn:aws:es:*:account-id:domain/domain-name/*" @@ -74 +74 @@ For example, you could add the following condition block to the policy: - "aws:SourceAccount": "your-account-id" + "aws:SourceAccount": "account-id" @@ -77 +77 @@ For example, you could add the following condition block to the policy: - "aws:SourceArn": "arn:aws:osis:region:your-account-id:pipeline/*" + "aws:SourceArn": "arn:aws:osis:region:account-id:pipeline/*" @@ -94 +94 @@ The following sample domain access policy allows the pipeline role named `pipeli - "AWS": "arn:aws:iam::your-account-id:role/pipeline-role" + "AWS": "arn:aws:iam::account-id:role/pipeline-role" @@ -97 +97 @@ The following sample domain access policy allows the pipeline role named `pipeli - "Resource": "arn:aws:es:region:your-account-id:domain/domain-name/*" + "Resource": "arn:aws:es:region:account-id:domain/domain-name/*" @@ -138 +138 @@ In the `sts_role_arn` field, specify the ARN of the IAM pipeline role: - **sts_role_arn: "arn:aws:iam::your-account-id:role/pipeline-role"** + **sts_role_arn: "arn:aws:iam::account-id:role/pipeline-role"**