AWS appsync medium security documentation change

Service: appsync · 2025-07-25 · Security-related medium

File: appsync/latest/devguide/tutorial-elasticsearch-resolvers.md

Summary

Updated Elasticsearch ARNs with 'us-east-1' region and specific account IDs

Security assessment

Corrected ARNs ensure policies reference intended resources, reducing misconfiguration risks.

Diff

diff --git a/appsync/latest/devguide/tutorial-elasticsearch-resolvers.md b/appsync/latest/devguide/tutorial-elasticsearch-resolvers.md
index 2ff4ef5fa..d6faa86ef 100644
--- a//appsync/latest/devguide/tutorial-elasticsearch-resolvers.md
+++ b//appsync/latest/devguide/tutorial-elasticsearch-resolvers.md
@@ -66 +66 @@ JSON
-                    "arn:aws:es:REGION:ACCOUNTNUMBER:domain/democluster/*"
+                    "arn:aws:es:us-east-1:ACCOUNTNUMBER:domain/democluster/*"
@@ -111 +111 @@ JSON
-                "AWS": "arn:aws:iam::ACCOUNTNUMBER:role/service-role/APPSYNC_DATASOURCE_ROLE"
+                    "AWS": "arn:aws:iam::111122223333:role/service-role/APPSYNC_DATASOURCE_ROLE"
@@ -120 +120 @@ JSON
-            "Resource": "arn:aws:es:REGION:ACCOUNTNUMBER:domain/DOMAIN_NAME/*"
+                "Resource": "arn:aws:es:us-east-1:ACCOUNTNUMBER:domain/DOMAIN_NAME/*"