AWS aurora-dsql documentation change
Summary
Updated example error message with real resource/action names and removed preview notice
Security assessment
Improves example accuracy for permission troubleshooting but does not add security features or address vulnerabilities
Diff
diff --git a/aurora-dsql/latest/userguide/security_iam_troubleshoot.md b/aurora-dsql/latest/userguide/security_iam_troubleshoot.md index 5397a9815..84de46304 100644 --- a//aurora-dsql/latest/userguide/security_iam_troubleshoot.md +++ b//aurora-dsql/latest/userguide/security_iam_troubleshoot.md @@ -7,2 +6,0 @@ I am not authorized to perform an action in Aurora DSQLI am not authorized to pe -Amazon Aurora DSQL is provided as a Preview service. To learn more, see [Betas and Previews ](https://aws.amazon.com/service-terms/) in the AWS Service Terms. - @@ -28 +26 @@ If you receive an error that you're not authorized to perform an action, your po -The following example error occurs when the `mateojackson` IAM user tries to use the console to view details about a fictional ``my-example-widget`` resource but doesn't have the fictional `dsql:`GetWidget`` permissions. +The following example error occurs when the `mateojackson` tries to use the console to view details about the ``my-dsql-cluster`` resource but doesn't have the ``GetCluster`` permissions. @@ -31 +29 @@ The following example error occurs when the `mateojackson` IAM user tries to use - User: arn:aws:iam::123456789012:user/mateojackson is not authorized to perform: dsql:GetWidget on resource: my-example-widget + User: iam:::user/mateojackson is not authorized to perform: GetCluster on resource: my-dsql-cluster @@ -33 +31 @@ The following example error occurs when the `mateojackson` IAM user tries to use -In this case, the policy for the `mateojackson` user must be updated to allow access to the ``my-example-widget`` resource by using the `dsql:`GetWidget`` action. +In this case, the policy for the `mateojackson` user must be updated to allow access to the ``my-dsql-cluster`` resource by using the ``GetCluster`` action. @@ -35 +33 @@ In this case, the policy for the `mateojackson` user must be updated to allow ac -If you need help, contact your AWS administrator. Your administrator is the person who provided you with your sign-in credentials. +If you need help, contact your administrator. Your administrator is the person who provided you with your sign-in credentials.