AWS bedrock documentation change
Summary
Standardized ARNs to 'us-east-1', updated account IDs, and adjusted JSON formatting for policy examples
Security assessment
Changes improve example consistency but do not address security vulnerabilities or introduce security features.
Diff
diff --git a/bedrock/latest/userguide/custom-model-job-access-security.md b/bedrock/latest/userguide/custom-model-job-access-security.md index 3efa28728..b851b0a79 100644 --- a//bedrock/latest/userguide/custom-model-job-access-security.md +++ b//bedrock/latest/userguide/custom-model-job-access-security.md @@ -80 +80 @@ JSON - "aws:SourceArn": "arn:aws:bedrock:us-east-1:account-id:model-customization-job/*" + "aws:SourceArn": "arn:aws:bedrock:us-east-1:111122223333:model-customization-job/*" @@ -156,4 +156,3 @@ JSON - "arn:aws:bedrock:${Region}:${AccountId}:inference-profile/${InferenceProfileId}", - "arn:aws:bedrock:${Region1}::foundation-model/${ModelId}", - "arn:aws:bedrock:${Region2}::foundation-model/${ModelId}", - ... + "arn:aws:bedrock:us-east-1:${AccountId}:inference-profile/${InferenceProfileId}", + "arn:aws:bedrock:us-east-1::foundation-model/${ModelId}", + "arn:aws:bedrock:us-east-1::foundation-model/${ModelId}" @@ -226 +225,3 @@ JSON - "aws:RequestTag/BedrockManaged": ["true"] + "aws:RequestTag/BedrockManaged": [ + "true" + ] @@ -229 +230,3 @@ JSON - "aws:RequestTag/BedrockModelCustomizationJobArn": ["arn:aws:bedrock:${{region}}:${{account-id}}:model-customization-job/*"] + "aws:RequestTag/BedrockModelCustomizationJobArn": [ + "arn:aws:bedrock:us-east-1:${{account-id}}:model-customization-job/*" + ] @@ -239,3 +242,3 @@ JSON - "arn:aws:ec2:${{region}}:${{account-id}}:subnet/${{subnet-id}}", - "arn:aws:ec2:${{region}}:${{account-id}}:subnet/${{subnet-id2}}", - "arn:aws:ec2:${{region}}:${{account-id}}:security-group/security-group-id" + "arn:aws:ec2:us-east-1:${{account-id}}:subnet/${{subnet-id}}", + "arn:aws:ec2:us-east-1:${{account-id}}:subnet/${{subnet-id2}}", + "arn:aws:ec2:us-east-1:${{account-id}}:security-group/security-group-id" @@ -255,2 +258,2 @@ JSON - "arn:aws:ec2:${{region}}:${{account-id}}:subnet/${{subnet-id}}", - "arn:aws:ec2:${{region}}:${{account-id}}:subnet/${{subnet-id2}}" + "arn:aws:ec2:us-east-1:${{account-id}}:subnet/${{subnet-id}}", + "arn:aws:ec2:us-east-1:${{account-id}}:subnet/${{subnet-id2}}" @@ -258 +261,3 @@ JSON - "ec2:ResourceTag/BedrockModelCustomizationJobArn": ["arn:aws:bedrock:${{region}}:${{account-id}}:model-customization-job/*"] + "ec2:ResourceTag/BedrockModelCustomizationJobArn": [ + "arn:aws:bedrock:us-east-1:${{account-id}}:model-customization-job/*" + ]