AWS systems-manager-automation-runbooks low security documentation change

Service: systems-manager-automation-runbooks · 2025-07-18 · Security-related low

File: systems-manager-automation-runbooks/latest/userguide/automation-aws-ddosresiliencyassessment.md

Summary

Added empty JSON section markers and fixed IAM role ARN format in example

Security assessment

ARN format correction from '123456789012' to placeholder ':::' prevents accidental use of example account IDs in IAM policies, reducing misconfiguration risks. This addresses a potential security hygiene issue.

Diff

diff --git a/systems-manager-automation-runbooks/latest/userguide/automation-aws-ddosresiliencyassessment.md b/systems-manager-automation-runbooks/latest/userguide/automation-aws-ddosresiliencyassessment.md
index 777525057..33c4ffa0e 100644
--- a//systems-manager-automation-runbooks/latest/userguide/automation-aws-ddosresiliencyassessment.md
+++ b//systems-manager-automation-runbooks/latest/userguide/automation-aws-ddosresiliencyassessment.md
@@ -176,0 +177,6 @@ The `AutomationAssumeRole` parameter requires the following actions to use the r
+JSON
+    
+
+****
+    
+    
@@ -240 +246 @@ The `AutomationAssumeRole` parameter requires the following actions to use the r
-                                    "Resource": "arn:aws:iam::123456789012:role/<AutomationAssumeRole-Name>",
+                                    "Resource": "arn:aws:iam:::role/<AutomationAssumeRole-Name>",