AWS AmazonRDS documentation change
Summary
Expanded IAM policy examples with concrete account IDs, SIDs, and resource ARNs for Zero-ETL integration
Security assessment
Provides clearer security policy examples for cross-service integration, enhancing access control documentation
Diff
diff --git a/AmazonRDS/latest/UserGuide/zero-etl.creating.md b/AmazonRDS/latest/UserGuide/zero-etl.creating.md index 27b33182e..aab52e7c2 100644 --- a//AmazonRDS/latest/UserGuide/zero-etl.creating.md +++ b//AmazonRDS/latest/UserGuide/zero-etl.creating.md @@ -52 +52,3 @@ JSON - "Statement": [{ + "Statement": [ + { + "Sid": "CreateIntegration", @@ -58,2 +60,2 @@ JSON - "arn:aws:rds:{region}:{account-id}:db:source-db", - "arn:aws:rds:{region}:{account-id}:integration:*" + "arn:aws:rds:us-east-1:123456789012:db:source-db", + "arn:aws:rds:us-east-1:123456789012:integration:*" @@ -62,0 +65 @@ JSON + "Sid": "DescribeIntegrationDetails", @@ -67 +70,3 @@ JSON - "Resource": ["*"] + "Resource": [ + "arn:aws:rds:us-east-1:123456789012:integration:*" + ] @@ -69,0 +75 @@ JSON + "Sid": "ChangeIntegrationDetails", @@ -76 +82 @@ JSON - "arn:aws:rds:{region}:{account-id}:integration:*" + "arn:aws:rds:us-east-1:123456789012:integration:*" @@ -79,0 +86 @@ JSON + "Sid": "AllowRedShiftIntegration", @@ -85 +92 @@ JSON - "arn:aws:redshift:{region}:{account-id}:namespace:namespace-uuid" + "arn:aws:redshift:us-east-1:123456789012:namespace:namespace-uuid" @@ -87 +93,0 @@ JSON - }] @@ -88,0 +95,3 @@ JSON + ] + } + @@ -136 +145 @@ JSON - "AWS": "arn:aws:iam::{external-account-id}:root" + "AWS": "arn:aws:iam::111122223333:root" @@ -294 +303 @@ JSON - "AWS": "arn:aws:iam::{account-ID}:root" + "AWS": "arn:aws:iam::111122223333:root" @@ -324 +333 @@ JSON - "AWS": "arn:aws:iam::{account-ID}:role/{role-name}" + "AWS": "arn:aws:iam::111122223333:role/{role-name}" @@ -346 +355 @@ JSON - "AWS": "arn:aws:iam::{account-ID}:role/{role-name}" + "AWS": "arn:aws:iam::111122223333:role/{role-name}"