AWS AWSEC2 documentation change
Summary
Standardized example ARNs with us-east-1 region and 111122223333 account ID
Security assessment
Routine example policy updates without security context changes.
Diff
diff --git a/AWSEC2/latest/UserGuide/permissions-for-ec2-instance-connect-endpoint.md b/AWSEC2/latest/UserGuide/permissions-for-ec2-instance-connect-endpoint.md index 4754c7808..19abebdf6 100644 --- a//AWSEC2/latest/UserGuide/permissions-for-ec2-instance-connect-endpoint.md +++ b//AWSEC2/latest/UserGuide/permissions-for-ec2-instance-connect-endpoint.md @@ -69,4 +69,4 @@ In the following example IAM policy, the `Resource` section grants permission to - "arn:aws:ec2:region:account-id:subnet/*", - "arn:aws:ec2:region:account-id:security-group/*", - "arn:aws:ec2:region:account-id:network-interface/*", - "arn:aws:ec2:region:account-id:instance-connect-endpoint/*" + "arn:aws:ec2:us-east-1:111122223333:subnet/*", + "arn:aws:ec2:us-east-1:111122223333:security-group/*", + "arn:aws:ec2:us-east-1:111122223333:network-interface/*", + "arn:aws:ec2:us-east-1:111122223333:instance-connect-endpoint/*" @@ -81 +81 @@ In the following example IAM policy, the `Resource` section grants permission to - "arn:aws:iam::account-id:role/aws-service-role/ec2-instance-connect.amazonaws.com/AWSServiceRoleForEc2InstanceConnect" + "arn:aws:iam::111122223333:role/aws-service-role/ec2-instance-connect.amazonaws.com/AWSServiceRoleForEc2InstanceConnect" @@ -136 +136 @@ This example evaluates if the connection to the instance is established on —po - "Resource": "arn:aws:ec2:region:account-id:instance-connect-endpoint/eice-123456789abcdef", + "Resource": "arn:aws:ec2:us-east-1:111122223333:instance-connect-endpoint/eice-123456789abcdef", @@ -184 +184 @@ This example evaluates if the connection to the instance is established on port - "Resource": "arn:aws:ec2:region:account-id:instance-connect-endpoint/eice-123456789abcdef", + "Resource": "arn:aws:ec2:us-east-1:111122223333:instance-connect-endpoint/eice-123456789abcdef", @@ -219 +219 @@ The following example IAM policy allows an IAM principal to connect to an instan - "Resource": "arn:aws:ec2:region:account-id:instance-connect-endpoint/eice-123456789abcdef", + "Resource": "arn:aws:ec2:us-east-1:111122223333:instance-connect-endpoint/eice-123456789abcdef",