AWS systems-manager-automation-runbooks documentation change
Summary
Updated resource ARN patterns in IAM policy examples to use empty account ID placeholders
Security assessment
Changed placeholder account IDs (123456789012) to empty fields in resource ARNs for SQS, SNS, KMS, and Lambda permissions. This appears to standardize example policies but doesn't introduce or modify security controls
Diff
diff --git a/systems-manager-automation-runbooks/latest/userguide/awssupport-troubleshoot-s3-event-notifications.md b/systems-manager-automation-runbooks/latest/userguide/awssupport-troubleshoot-s3-event-notifications.md index fbfda4b57..b4d1e2924 100644 --- a//systems-manager-automation-runbooks/latest/userguide/awssupport-troubleshoot-s3-event-notifications.md +++ b//systems-manager-automation-runbooks/latest/userguide/awssupport-troubleshoot-s3-event-notifications.md @@ -106,0 +107,6 @@ The `AutomationAssumeRole` parameter requires the following actions to use the r +JSON + + +**** + + @@ -135 +141 @@ The `AutomationAssumeRole` parameter requires the following actions to use the r - "Resource": "arn:aws:sqs:<region>:123456789012:*" + "Resource": "arn:aws:sqs:<region>::*" @@ -143 +149 @@ The `AutomationAssumeRole` parameter requires the following actions to use the r - "Resource": "arn:aws:sns:<region>:123456789012:*" + "Resource": "arn:aws:sns:<region>::*" @@ -153 +159 @@ The `AutomationAssumeRole` parameter requires the following actions to use the r - "Resource": "arn:aws:kms:<region>:123456789012:key/<key-id>" + "Resource": "arn:aws:kms:<region>::key/<key-id>" @@ -162 +168 @@ The `AutomationAssumeRole` parameter requires the following actions to use the r - "Resource": "arn:aws:lambda:<region>:123456789012:function:*" + "Resource": "arn:aws:lambda:<region>::function:*"