AWS awscloudtrail documentation change
Summary
Updated ARN patterns in example policies to use concrete region/partition values
Security assessment
Changes replace generic ARN placeholders with 'aws' partition and 'us-east-1' region. This improves example accuracy but doesn't relate to security controls or vulnerabilities.
Diff
diff --git a/awscloudtrail/latest/userguide/lake-dashboard.md b/awscloudtrail/latest/userguide/lake-dashboard.md index 0d13a772f..b986140c9 100644 --- a//awscloudtrail/latest/userguide/lake-dashboard.md +++ b//awscloudtrail/latest/userguide/lake-dashboard.md @@ -169,2 +169,2 @@ JSON - "arn:partition:cloudtrail:region:account-id:dashboard/*", - "arn:partition:cloudtrail:region:account-id:eventdatastore/eds-id" + "arn:aws:us-east-1:account-id:dashboard/*", + "arn:aws:us-east-1:account-id:eventdatastore/eds-id" @@ -209,2 +209,2 @@ JSON - "arn:partition:cloudtrail:region:account-id:dashboard/*", - "arn:partition:cloudtrail:region:account-id:eventdatastore/eds-id" + "arn:aws:us-east-1:account-id:dashboard/*", + "arn:aws:us-east-1:account-id:eventdatastore/eds-id" @@ -246,2 +246,2 @@ JSON - "arn:partition:cloudtrail:region:account-id:dashboard/dashboard-name", - "arn:partition:cloudtrail:region:account-id:eventdatastore/eds-id" + "arn:aws:us-east-1:account-id:dashboard/dashboard-name", + "arn:aws:us-east-1:account-id:eventdatastore/eds-id"