AWS AmazonCloudWatch documentation change
Summary
Updated account IDs (0123456789 → 111122223333), standardized region to us-east-1, and improved JSON formatting in resource policy examples
Security assessment
Changes involve example standardization and formatting improvements rather than addressing security vulnerabilities. While resource policies are security-related, these updates appear to be documentation accuracy improvements rather than responses to security issues.
Diff
diff --git a/AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.md b/AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.md index c8df82e5a..b5105889f 100644 --- a//AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.md +++ b//AmazonCloudWatch/latest/logs/AWS-logs-and-resource-policy.md @@ -156 +156 @@ JSON - "arn:aws:logs:us-east-1:0123456789:log-group:my-log-group:log-stream:*" + "arn:aws:logs:us-east-1:111122223333:log-group:my-log-group:log-stream:*" @@ -160 +160,3 @@ JSON - "aws:SourceAccount": ["0123456789"] + "aws:SourceAccount": [ + "0123456789" + ] @@ -163 +165,3 @@ JSON - "aws:SourceArn": ["arn:aws:logs:us-east-1:0123456789:*"] + "aws:SourceArn": [ + "arn:aws:logs:us-east-1:111122223333:*" + ] @@ -237 +241,3 @@ JSON - "aws:SourceAccount": ["0123456789"] + "aws:SourceAccount": [ + "0123456789" + ] @@ -240 +246,3 @@ JSON - "aws:SourceArn": ["arn:aws:logs:us-east-1:0123456789:*"] + "aws:SourceArn": [ + "arn:aws:logs:us-east-1:111122223333:*" + ] @@ -255 +263,3 @@ JSON - "aws:SourceAccount": ["0123456789"] + "aws:SourceAccount": [ + "0123456789" + ] @@ -258 +268,3 @@ JSON - "aws:SourceArn": ["arn:aws:logs:us-east-1:0123456789:*"] + "aws:SourceArn": [ + "arn:aws:logs:us-east-1:111122223333:*" + ] @@ -488,3 +500,3 @@ JSON - "arn:aws:logs:region:account-id:delivery:*", - "arn:aws:logs:region:account-id:delivery-source:*", - "arn:aws:logs:region:account-id:delivery-destination:*" + "arn:aws:logs:us-east-1:account-id:delivery:*", + "arn:aws:logs:us-east-1:account-id:delivery-source:*", + "arn:aws:logs:us-east-1:account-id:delivery-destination:*" @@ -513 +525 @@ JSON - "arn:aws:logs:region:account-id:*" + "arn:aws:logs:us-east-1:account-id:*" @@ -547 +559 @@ JSON - "arn:aws:logs:us-east-1:0123456789:log-group:my-log-group:log-stream:*" + "arn:aws:logs:us-east-1:111122223333:log-group:my-log-group:log-stream:*" @@ -551 +563,3 @@ JSON - "aws:SourceAccount": ["0123456789"] + "aws:SourceAccount": [ + "0123456789" + ] @@ -554 +568,3 @@ JSON - "aws:SourceArn": ["arn:aws:logs:us-east-1:0123456789:*"] + "aws:SourceArn": [ + "arn:aws:logs:us-east-1:111122223333:*" + ] @@ -597,3 +613,3 @@ JSON - "arn:aws:logs:region:account-id:delivery:*", - "arn:aws:logs:region:account-id:delivery-source:*", - "arn:aws:logs:region:account-id:delivery-destination:*" + "arn:aws:logs:us-east-1:account-id:delivery:*", + "arn:aws:logs:us-east-1:account-id:delivery-source:*", + "arn:aws:logs:us-east-1:account-id:delivery-destination:*" @@ -650 +666,3 @@ JSON - "aws:SourceAccount": ["0123456789"] + "aws:SourceAccount": [ + "0123456789" + ] @@ -653 +671,3 @@ JSON - "aws:SourceArn": ["arn:aws:logs:us-east-1:0123456789:delivery-source:*"] + "aws:SourceArn": [ + "arn:aws:logs:us-east-1:111122223333:delivery-source:*" + ] @@ -745,3 +765,3 @@ JSON - "arn:aws:logs:region:account-id:delivery:*", - "arn:aws:logs:region:account-id:delivery-source:*", - "arn:aws:logs:region:account-id:delivery-destination:*" + "arn:aws:logs:us-east-1:account-id:delivery:*", + "arn:aws:logs:us-east-1:account-id:delivery-source:*", + "arn:aws:logs:us-east-1:account-id:delivery-destination:*" @@ -768 +788 @@ JSON - "arn:aws:firehose:region:account-id:deliverystream/*" + "arn:aws:firehose:us-east-1:account-id:deliverystream/*" @@ -777 +797 @@ JSON - "Resource": "arn:aws:iam::account-id:role/aws-service-role/delivery.logs.amazonaws.com/AWSServiceRoleForLogDelivery" + "Resource": "arn:aws:iam::111122223333:role/aws-service-role/delivery.logs.amazonaws.com/AWSServiceRoleForLogDelivery" @@ -1044 +1064 @@ JSON - "Resource": "arn:aws:bedrock:region:AAAAAAAAAAAA:knowledge-base/XXXXXXXXXX" + "Resource": "arn:aws:bedrock:us-east-1:AAAAAAAAAAAA:knowledge-base/XXXXXXXXXX" @@ -1054,3 +1074,3 @@ JSON - "arn:aws:logs:region:AAAAAAAAAAAA:delivery-source:*", - "arn:aws:logs:region:AAAAAAAAAAAA:delivery:*", - "arn:aws:logs:region:BBBBBBBBBBBB:delivery-destination:*" + "arn:aws:logs:us-east-1:AAAAAAAAAAAA:delivery-source:*", + "arn:aws:logs:us-east-1:AAAAAAAAAAAA:delivery:*", + "arn:aws:logs:us-east-1:BBBBBBBBBBBB:delivery-destination:*" @@ -1100 +1120 @@ JSON - "Resource": "arn:aws:logs:region:BBBBBBBBBBBB:delivery-destination:*" + "Resource": "arn:aws:logs:us-east-1:BBBBBBBBBBBB:delivery-destination:*" @@ -1131 +1151,3 @@ JSON - "aws:SourceAccount": ["AAAAAAAAAAAA"] + "aws:SourceAccount": [ + "AAAAAAAAAAAA" + ] @@ -1134 +1156,3 @@ JSON - "aws:SourceArn": ["arn:aws:logs:region:AAAAAAAAAAAA:delivery-source:my-delivery-source"] + "aws:SourceArn": [ + "arn:aws:logs:us-east-1:AAAAAAAAAAAA:delivery-source:my-delivery-source" + ] @@ -1159 +1183 @@ JSON - } + }, @@ -1163 +1187 @@ JSON - "Resource": "arn:aws:kms:region:BBBBBBBBBBBB:key/X", + "Resource": "arn:aws:kms:us-east-1:BBBBBBBBBBBB:key/X", @@ -1166 +1190,3 @@ JSON - "aws:SourceAccount": ["AAAAAAAAAAAA"] + "aws:SourceAccount": [ + "AAAAAAAAAAAA" + ] @@ -1169 +1195,3 @@ JSON - "aws:SourceArn": ["arn:aws:logs:region:AAAAAAAAAAAA:delivery-source:my-delivery-source"] + "aws:SourceArn": [ + "arn:aws:logs:us-east-1:AAAAAAAAAAAA:delivery-source:my-delivery-source" + ] @@ -1203 +1231 @@ JSON - "Resource": "arn:aws:logs:region:BBBBBBBBBBBB:delivery-destination:my-s3-delivery-destination" + "Resource": "arn:aws:logs:us-east-1:BBBBBBBBBBBB:delivery-destination:my-s3-delivery-destination" @@ -1243 +1271 @@ JSON - "Resource": "arn:aws:iam::BBBBBBBBBBBB:role/aws-service-role/delivery.logs.amazonaws.com/AWSServiceRoleForLogDelivery", + "Resource": "arn:aws:iam::111122223333:role/aws-service-role/delivery.logs.amazonaws.com/AWSServiceRoleForLogDelivery" @@ -1251 +1279 @@ JSON - "Resource": "arn:aws:firehose:region:BBBBBBBBBBBB:deliverystream/X" + "Resource": "arn:aws:firehose:us-east-1:BBBBBBBBBBBB:deliverystream/X" @@ -1260 +1288 @@ JSON - "Resource": "arn:aws:logs:region:BBBBBBBBBBBB:delivery-destination:*" + "Resource": "arn:aws:logs:us-east-1:BBBBBBBBBBBB:delivery-destination:*" @@ -1294 +1322 @@ JSON - "Resource": "arn:aws:logs:region:BBBBBBBBBBBB:delivery-destination:my-fh-delivery-destination" + "Resource": "arn:aws:logs:us-east-1:BBBBBBBBBBBB:delivery-destination:my-fh-delivery-destination"