AWS config medium security documentation change

Service: config · 2025-04-11 · Security-related medium

File: config/latest/developerguide/iamrole-permissions.md

Summary

Corrected policy ARN in CLI example from 'service-role/' to 'aws-service-role/'

Security assessment

Fixes an incorrect policy ARN that could lead to misconfigured roles, addressing a potential security risk from improper permissions.

Diff

diff --git a/config/latest/developerguide/iamrole-permissions.md b/config/latest/developerguide/iamrole-permissions.md
index f574087e9..784e1c97a 100644
--- a//config/latest/developerguide/iamrole-permissions.md
+++ b//config/latest/developerguide/iamrole-permissions.md
@@ -154 +154 @@ If you use the AWS CLI, use the `attach-role-policy` command and specify the Ama
-    $ aws iam attach-role-policy --role-name myConfigRole --policy-arn arn:aws:iam::aws:policy/service-role/AWSServiceRoleForConfig
+    $ aws iam attach-role-policy --role-name myConfigRole --policy-arn arn:aws:iam::aws:policy/aws-service-role/AWSServiceRoleForConfig