AWS AmazonRDS documentation change
Summary
Added Sid to policy statement and updated KMS key ARN with concrete values
Security assessment
Change adds statement ID for policy organization and updates example ARN with specific region/account details. No security implications identified.
Diff
diff --git a/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Integrating.Authorizing.IAM.KMSCreatePolicy.md b/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Integrating.Authorizing.IAM.KMSCreatePolicy.md index 32fc97c54..acfcdf2e8 100644 --- a//AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Integrating.Authorizing.IAM.KMSCreatePolicy.md +++ b//AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Integrating.Authorizing.IAM.KMSCreatePolicy.md @@ -21,0 +22 @@ JSON + "Sid": "AllowAuroraToAccessKey", @@ -26 +27 @@ JSON - "Resource": "arn:aws:kms:<region>:<123456789012>:key/<key-ID>" + "Resource": "arn:aws:kms:us-east-1:123456789012:key/key-ID"