AWS sns documentation change
Summary
Updated cross-region delivery configuration details and service principal formats
Security assessment
Clarifies regional service principal configurations but doesn't address security vulnerabilities or add security controls. Changes appear operational rather than security-focused.
Diff
diff --git a/sns/latest/dg/sns-cross-region-delivery.md b/sns/latest/dg/sns-cross-region-delivery.md index 4e48c8866..c32658c84 100644 --- a//sns/latest/dg/sns-cross-region-delivery.md +++ b//sns/latest/dg/sns-cross-region-delivery.md @@ -41,3 +41,3 @@ Cross-region delivery support to Amazon SQS Cross-region delivery type | Support -Default-enabled Region to opt-in Region | Supported using `sns.<opt-in-region>.amazonaws.com` in the service principal for the queue -Opt-in Region to default-enabled Region | Supported using `sns.<opt-in-region>.amazonaws.com` in the service principal for the queue -Opt-in Region to opt-in Region | Not supported +Default-enabled Region to opt-in Region | Supported using `sns.`queue-region`.amazonaws.com` in the service principal for the queue +Opt-in Region to default-enabled Region | Supported using `sns.`topic-region`.amazonaws.com` in the service principal for the queue +Opt-in Region to opt-in Region | Supported using `sns.`queue-region`.amazonaws.com` in the service principal for the queue @@ -46,0 +47,6 @@ The following is an example of an access policy statement that allows an Amazon +JSON + + +**** + + @@ -58 +64 @@ The following is an example of an access policy statement that allows an Amazon - "Resource": "arn:aws:sqs:us-east-1:111111111111:destination_queue_name", + "Resource": "arn:aws:sqs::111111111111:destination_queue_name", @@ -73,3 +80,3 @@ Cross-region delivery support to AWS Lambda Cross-region delivery type | Support -Default-enabled Region to opt-in Region | Not supported -Opt-in Region to default-enabled Region | Supported using `sns.<opt-in-region>.amazonaws.com` in the service principal for the Lambda function -Opt-in Region to opt-in Region | Not supported +Default-enabled Region to opt-in Region | Supported using `sns.`lambda-function-region`.amazonaws.com` in the service principal for the Lambda function +Opt-in Region to default-enabled Region | Supported using `sns.`topic-region`.amazonaws.com` in the service principal for the Lambda function +Opt-in Region to opt-in Region | Supported using `sns.`lambda-function-region`.amazonaws.com` in the service principal for the Lambda function