AWS step-functions documentation change
Summary
Replaced hardcoded account IDs and regions with placeholders (account-id, region) in resource ARN examples
Security assessment
Change standardizes documentation examples but does not address security vulnerabilities or document security features.
Diff
diff --git a/step-functions/latest/dg/tutorial-access-cross-acct-resources.md b/step-functions/latest/dg/tutorial-access-cross-acct-resources.md index f0896eac3..7f6fccdc3 100644 --- a//step-functions/latest/dg/tutorial-access-cross-acct-resources.md +++ b//step-functions/latest/dg/tutorial-access-cross-acct-resources.md @@ -29 +29 @@ IAM roles and resource-based policies delegate access across accounts only withi - arn:aws:lambda:us-east-2:123456789012:function:functionName + arn:aws:lambda:us-east-2:account-id:function:functionName @@ -116 +116 @@ After you create the trust relationship, a user from the source account can use - "AWS": "arn:aws:iam::123456789012:role/ExecutionRole" // The source account's state machine execution role ARN + "AWS": "arn:aws:iam::account-id:role/ExecutionRole" // The source account's state machine execution role ARN @@ -120 +120 @@ After you create the trust relationship, a user from the source account can use - "sts:ExternalId": "arn:aws:states:us-east-1:123456789012:stateMachine:testCrossAccount" //// ARN of the state machine that will assume the role. + "sts:ExternalId": "arn:aws:states:region:account-id:stateMachine:testCrossAccount" //// ARN of the state machine that will assume the role.