AWS amazonq documentation change
Summary
Standardized EC2 ARNs to 'us-east-1' region and specific account ID {111122223333} in network interface policies
Security assessment
Consistent use of region/account in resource ARNs improves example validity but doesn't address specific security vulnerabilities or add security documentation.
Diff
diff --git a/amazonq/latest/qbusiness-ug/webcrawler-iam-role.md b/amazonq/latest/qbusiness-ug/webcrawler-iam-role.md index 160f6b53b..ea84f7a1f 100644 --- a//amazonq/latest/qbusiness-ug/webcrawler-iam-role.md +++ b//amazonq/latest/qbusiness-ug/webcrawler-iam-role.md @@ -127 +127,2 @@ JSON - "Statement": [{ + "Statement": [ + { @@ -135,2 +136,2 @@ JSON - "arn:aws:ec2:{{region}}:{{account_id}}:subnet/[[subnet_ids]]", - "arn:aws:ec2:{{region}}:{{account_id}}:security-group/[[security_group]]" + "arn:aws:ec2:us-east-1:{111122223333}:subnet/[[subnet_ids]]", + "arn:aws:ec2:us-east-1:{111122223333}:security-group/[[security_group]]" @@ -146 +147 @@ JSON - "Resource": "arn:aws:ec2:{{region}}:{{account_id}}:network-interface/*", + "Resource": "arn:aws:ec2:{{region}}:{111122223333}:network-interface/*", @@ -149 +150 @@ JSON - "aws:RequestTag/AMAZON_Q": "qbusiness_{{account_id}}_{{application_id}}_*" + "aws:RequestTag/AMAZON_Q": "qbusiness_{111122223333}_{{application_id}}_*" @@ -164 +165 @@ JSON - "Resource": "arn:aws:ec2:{{region}}:{{account_id}}:network-interface/*", + "Resource": "arn:aws:ec2:{{region}}:{111122223333}:network-interface/*", @@ -177 +178 @@ JSON - "Resource": "arn:aws:ec2:{{region}}:{{account_id}}:network-interface/*", + "Resource": "arn:aws:ec2:{{region}}:{111122223333}:network-interface/*", @@ -180 +181 @@ JSON - "aws:ResourceTag/AMAZON_Q": "qbusiness_{{account_id}}_{{application_id}}_*" + "aws:ResourceTag/AMAZON_Q": "qbusiness_{111122223333}_{{application_id}}_*" @@ -228 +229 @@ JSON - "aws:SourceArn": "arn:aws:qbusiness:{{region}}:{{source_account}}:application/{{application_id}}" + "aws:SourceArn": "arn:aws:qbusiness:us-east-1:{{source_account}}:application/{{application_id}}"