AWS Security ChangesHomeSearch

AWS opensearch-service documentation change

Service: opensearch-service · 2025-03-30 · Documentation low

File: opensearch-service/latest/developerguide/pipeline-domain-access.md

Summary

Standardized placeholder 'your-account-id' to 'account-id' in policy examples

Security assessment

Formatting change to documentation examples without altering security content or addressing vulnerabilities.

Diff

diff --git a/opensearch-service/latest/developerguide/pipeline-domain-access.md b/opensearch-service/latest/developerguide/pipeline-domain-access.md
index 1b2ac2de1..ee2859140 100644
--- a/opensearch-service/latest/developerguide/pipeline-domain-access.md
+++ b/opensearch-service/latest/developerguide/pipeline-domain-access.md
@@ -39 +39 @@ The following sample policy demonstrates the [least privilege](https://docs.aws.
-                "Resource": "arn:aws:es:*:your-account-id:domain/*"
+                "Resource": "arn:aws:es:*:account-id:domain/*"
@@ -44 +44 @@ The following sample policy demonstrates the [least privilege](https://docs.aws.
-                "Resource": "arn:aws:es:*:your-account-id:domain/domain-name/*"
+                "Resource": "arn:aws:es:*:account-id:domain/domain-name/*"
@@ -74 +74 @@ For example, you could add the following condition block to the policy:
-            "aws:SourceAccount": "your-account-id"
+            "aws:SourceAccount": "account-id"
@@ -77 +77 @@ For example, you could add the following condition block to the policy:
-            "aws:SourceArn": "arn:aws:osis:region:your-account-id:pipeline/*"
+            "aws:SourceArn": "arn:aws:osis:region:account-id:pipeline/*"
@@ -94 +94 @@ The following sample domain access policy allows the pipeline role named `pipeli
-            "AWS": "arn:aws:iam::your-account-id:role/pipeline-role"
+            "AWS": "arn:aws:iam::account-id:role/pipeline-role"
@@ -97 +97 @@ The following sample domain access policy allows the pipeline role named `pipeli
-          "Resource": "arn:aws:es:region:your-account-id:domain/domain-name/*"
+          "Resource": "arn:aws:es:region:account-id:domain/domain-name/*"
@@ -138 +138 @@ In the `sts_role_arn` field, specify the ARN of the IAM pipeline role:
-              **sts_role_arn: "arn:aws:iam::your-account-id:role/pipeline-role"**
+              **sts_role_arn: "arn:aws:iam::account-id:role/pipeline-role"**