AWS AmazonRDS documentation change
Summary
Updated IAM policies with concrete account IDs and added statement IDs
Security assessment
Improves policy examples with specific values and structure. No security features added or vulnerabilities addressed.
Diff
diff --git a/AmazonRDS/latest/AuroraUserGuide/zero-etl.creating.md b/AmazonRDS/latest/AuroraUserGuide/zero-etl.creating.md index 84a53b6ea..0b6717104 100644 --- a//AmazonRDS/latest/AuroraUserGuide/zero-etl.creating.md +++ b//AmazonRDS/latest/AuroraUserGuide/zero-etl.creating.md @@ -52 +52,3 @@ JSON - "Statement": [{ + "Statement": [ + { + "Sid": "CreateIntegration", @@ -58,2 +60,2 @@ JSON - "arn:aws:rds:{region}:{account-id}:cluster:source-db", - "arn:aws:rds:{region}:{account-id}:integration:*" + "arn:aws:rds:us-east-1:123456789012:db:source-db", + "arn:aws:rds:us-east-1:123456789012:integration:*" @@ -62,0 +65 @@ JSON + "Sid": "DescribeIntegrationDetails", @@ -67 +70,3 @@ JSON - "Resource": ["*"] + "Resource": [ + "arn:aws:rds:us-east-1:123456789012:integration:*" + ] @@ -69,0 +75 @@ JSON + "Sid": "ChangeIntegrationDetails", @@ -76 +82 @@ JSON - "arn:aws:rds:{region}:{account-id}:integration:*" + "arn:aws:rds:us-east-1:123456789012:integration:*" @@ -79,0 +86 @@ JSON + "Sid": "AllowRedShiftIntegration", @@ -85 +92 @@ JSON - "arn:aws:redshift:{region}:{account-id}:namespace:namespace-uuid" + "arn:aws:redshift:us-east-1:123456789012:namespace:namespace-uuid" @@ -87 +93,0 @@ JSON - }] @@ -88,0 +95,3 @@ JSON + ] + } + @@ -136 +145 @@ JSON - "AWS": "arn:aws:iam::{external-account-id}:root" + "AWS": "arn:aws:iam::111122223333:root" @@ -294 +303 @@ JSON - "AWS": "arn:aws:iam::{account-ID}:root" + "AWS": "arn:aws:iam::111122223333:root" @@ -324 +333 @@ JSON - "AWS": "arn:aws:iam::{account-ID}:role/{role-name}" + "AWS": "arn:aws:iam::111122223333:role/{role-name}" @@ -346 +355 @@ JSON - "AWS": "arn:aws:iam::{account-ID}:role/{role-name}" + "AWS": "arn:aws:iam::111122223333:role/{role-name}"