AWS Security ChangesHomeSearch

AWS AWSEC2 documentation change

Service: AWSEC2 · 2025-07-25 · Documentation low

File: AWSEC2/latest/UserGuide/permissions-for-ec2-instance-connect-endpoint.md

Summary

Standardized example ARNs with us-east-1 region and 111122223333 account ID

Security assessment

Routine example policy updates without security context changes.

Diff

diff --git a/AWSEC2/latest/UserGuide/permissions-for-ec2-instance-connect-endpoint.md b/AWSEC2/latest/UserGuide/permissions-for-ec2-instance-connect-endpoint.md
index 4754c7808..19abebdf6 100644
--- a//AWSEC2/latest/UserGuide/permissions-for-ec2-instance-connect-endpoint.md
+++ b//AWSEC2/latest/UserGuide/permissions-for-ec2-instance-connect-endpoint.md
@@ -69,4 +69,4 @@ In the following example IAM policy, the `Resource` section grants permission to
-                    "arn:aws:ec2:region:account-id:subnet/*",
-                    "arn:aws:ec2:region:account-id:security-group/*",
-                    "arn:aws:ec2:region:account-id:network-interface/*",
-                    "arn:aws:ec2:region:account-id:instance-connect-endpoint/*"
+                    "arn:aws:ec2:us-east-1:111122223333:subnet/*",
+                    "arn:aws:ec2:us-east-1:111122223333:security-group/*",
+                    "arn:aws:ec2:us-east-1:111122223333:network-interface/*",
+                    "arn:aws:ec2:us-east-1:111122223333:instance-connect-endpoint/*"
@@ -81 +81 @@ In the following example IAM policy, the `Resource` section grants permission to
-                    "arn:aws:iam::account-id:role/aws-service-role/ec2-instance-connect.amazonaws.com/AWSServiceRoleForEc2InstanceConnect"
+                    "arn:aws:iam::111122223333:role/aws-service-role/ec2-instance-connect.amazonaws.com/AWSServiceRoleForEc2InstanceConnect"
@@ -136 +136 @@ This example evaluates if the connection to the instance is established on —po
-                "Resource": "arn:aws:ec2:region:account-id:instance-connect-endpoint/eice-123456789abcdef",
+                "Resource": "arn:aws:ec2:us-east-1:111122223333:instance-connect-endpoint/eice-123456789abcdef",
@@ -184 +184 @@ This example evaluates if the connection to the instance is established on port
-                "Resource": "arn:aws:ec2:region:account-id:instance-connect-endpoint/eice-123456789abcdef",
+                "Resource": "arn:aws:ec2:us-east-1:111122223333:instance-connect-endpoint/eice-123456789abcdef",
@@ -219 +219 @@ The following example IAM policy allows an IAM principal to connect to an instan
-                "Resource": "arn:aws:ec2:region:account-id:instance-connect-endpoint/eice-123456789abcdef",
+                "Resource": "arn:aws:ec2:us-east-1:111122223333:instance-connect-endpoint/eice-123456789abcdef",