AWS appconfig medium security documentation change

Service: appconfig · 2025-07-25 · Security-related medium

File: appconfig/latest/userguide/appconfig-agent-how-to-use-additional-features-multi-account.md

Summary

Updated IAM policy JSON formatting and ARN regions/account IDs

Security assessment

Corrected ARN structure and account ID placeholders ensure proper policy enforcement, preventing misconfiguration risks. Example: 'arn:aws:us-east-1' fixes invalid ARN format.

Diff

diff --git a/appconfig/latest/userguide/appconfig-agent-how-to-use-additional-features-multi-account.md b/appconfig/latest/userguide/appconfig-agent-how-to-use-additional-features-multi-account.md
index dd19c8052..949b52e41 100644
--- a//appconfig/latest/userguide/appconfig-agent-how-to-use-additional-features-multi-account.md
+++ b//appconfig/latest/userguide/appconfig-agent-how-to-use-additional-features-multi-account.md
@@ -90 +90,2 @@ JSON
-        "Statement": [{
+        "Statement": [
+            {
@@ -96 +97 @@ JSON
-            "Resource": "arn:partition:appconfig:region:vendor_account_ID:application/vendor_application_ID/environment/vendor_environment_ID/configuration/vendor_configuration_ID"
+                "Resource": "arn:aws:us-east-1:vendor_account_ID:application/vendor_application_ID/environment/vendor_environment_ID/configuration/vendor_configuration_ID"
@@ -181 +182 @@ JSON
-                    "AWS": "arn:aws:iam::retrieval_account_ID:role/appconfig_role_in_retrieval_account"
+                    "AWS": "arn:aws:iam::111122223333:role/appconfig_role_in_retrieval_account"