AWS kendra documentation change
Summary
Added JSON section headers and formatting separators (****) to multiple IAM policy examples throughout the document
Security assessment
The changes are structural/documentation formatting improvements for existing IAM policies rather than addressing security vulnerabilities or introducing new security features. While IAM policies are security-related by nature, these changes only improve readability of existing security documentation without modifying policy content or addressing specific security issues.
Diff
diff --git a/kendra/latest/dg/iam-roles.md b/kendra/latest/dg/iam-roles.md index 1094f45f4..dfc88de3c 100644 --- a//kendra/latest/dg/iam-roles.md +++ b//kendra/latest/dg/iam-roles.md @@ -45,0 +46,6 @@ A role policy to allow Amazon Kendra to access a CloudWatch log. +JSON + + +**** + + @@ -83,0 +91,6 @@ A role policy to allow Amazon Kendra to access AWS Secrets Manager. If you are u +JSON + + +**** + + @@ -146,0 +161,6 @@ A trust policy to allow Amazon Kendra to assume a role. +JSON + + +**** + + @@ -170,0 +192,6 @@ A required role policy to allow Amazon Kendra to access an Amazon S3 bucket. +JSON + + +**** + + @@ -188,0 +217,6 @@ A trust policy to allow Amazon Kendra to assume a role. +JSON + + +**** + + @@ -204,0 +240,6 @@ It is recommended that you include `aws:sourceAccount` and `aws:sourceArn` in th +JSON + + +**** + + @@ -230,0 +273,6 @@ An optional role policy to allow Amazon Kendra to use an AWS KMS customer master +JSON + + +**** + + @@ -265,0 +315,6 @@ You can connect an Adobe Experience Manager data source to Amazon Kendra through +JSON + + +**** + + @@ -316,0 +373,6 @@ A trust policy to allow Amazon Kendra to assume a role. +JSON + + +**** + + @@ -345,0 +409,6 @@ You can connect an Alfresco data source to Amazon Kendra through Amazon VPC. If +JSON + + +**** + + @@ -396,0 +467,6 @@ A trust policy to allow Amazon Kendra to assume a role. +JSON + + +**** + + @@ -425,0 +503,6 @@ You can connect an Aurora (MySQL) data source to Amazon Kendra through Amazon VP +JSON + + +**** + + @@ -476,0 +561,6 @@ A trust policy to allow Amazon Kendra to assume a role. +JSON + + +**** + + @@ -505,0 +597,6 @@ You can connect an Aurora (PostgreSQL) data source to Amazon Kendra through Amaz +JSON + + +**** + + @@ -556,0 +655,6 @@ A trust policy to allow Amazon Kendra to assume a role. +JSON + + +**** + + @@ -585,0 +691,6 @@ When you use Amazon FSx, you provide a role with the following policies. +JSON + + +**** + + @@ -690,0 +803,6 @@ A trust policy to allow Amazon Kendra to assume a role. +JSON + + +**** + + @@ -775,0 +895,6 @@ If you have encrypted the Amazon S3 bucket that contains the SSL certificate use +JSON + + +**** + + @@ -795,0 +922,6 @@ A trust policy to allow Amazon Kendra to assume a role. +JSON + + +**** + + @@ -824,0 +958,6 @@ You can connect an Amazon RDS (Microsoft SQL Server) data source to Amazon Kendr +JSON + + +**** + + @@ -875,0 +1016,6 @@ A trust policy to allow Amazon Kendra to assume a role. +JSON + + +**** + + @@ -904,0 +1052,6 @@ You can connect an Amazon RDS (MySQL) data source to Amazon Kendra through Amazo +JSON + + +**** + + @@ -955,0 +1110,6 @@ A trust policy to allow Amazon Kendra to assume a role. +JSON + + +**** + + @@ -984,0 +1146,6 @@ You can connect an Amazon RDS Oracle data source to Amazon Kendra through Amazon +JSON + + +**** + + @@ -1035,0 +1204,6 @@ A trust policy to allow Amazon Kendra to assume a role. +JSON + + +**** + + @@ -1064,0 +1240,6 @@ You can connect an Amazon RDS (PostgreSQL) data source to Amazon Kendra through +JSON + + +**** + + @@ -1115,0 +1298,6 @@ A trust policy to allow Amazon Kendra to assume a role. +JSON + + +**** + + @@ -1139,0 +1329,6 @@ A required role policy to allow Amazon Kendra to use an Amazon S3 bucket as a da +JSON + + +**** + +