AWS Security ChangesHomeSearch

AWS bedrock documentation change

Service: bedrock · 2025-07-25 · Documentation low

File: bedrock/latest/userguide/custom-model-job-access-security.md

Summary

Standardized ARNs to 'us-east-1', updated account IDs, and adjusted JSON formatting for policy examples

Security assessment

Changes improve example consistency but do not address security vulnerabilities or introduce security features.

Diff

diff --git a/bedrock/latest/userguide/custom-model-job-access-security.md b/bedrock/latest/userguide/custom-model-job-access-security.md
index 3efa28728..b851b0a79 100644
--- a//bedrock/latest/userguide/custom-model-job-access-security.md
+++ b//bedrock/latest/userguide/custom-model-job-access-security.md
@@ -80 +80 @@ JSON
-                        "aws:SourceArn": "arn:aws:bedrock:us-east-1:account-id:model-customization-job/*"
+                        "aws:SourceArn": "arn:aws:bedrock:us-east-1:111122223333:model-customization-job/*"
@@ -156,4 +156,3 @@ JSON
-                    "arn:aws:bedrock:${Region}:${AccountId}:inference-profile/${InferenceProfileId}",
-                    "arn:aws:bedrock:${Region1}::foundation-model/${ModelId}",
-                    "arn:aws:bedrock:${Region2}::foundation-model/${ModelId}",
-                ...
+                    "arn:aws:bedrock:us-east-1:${AccountId}:inference-profile/${InferenceProfileId}",
+                    "arn:aws:bedrock:us-east-1::foundation-model/${ModelId}",
+                    "arn:aws:bedrock:us-east-1::foundation-model/${ModelId}"
@@ -226 +225,3 @@ JSON
-                       "aws:RequestTag/BedrockManaged": ["true"]
+                        "aws:RequestTag/BedrockManaged": [
+                            "true"
+                        ]
@@ -229 +230,3 @@ JSON
-                       "aws:RequestTag/BedrockModelCustomizationJobArn": ["arn:aws:bedrock:${{region}}:${{account-id}}:model-customization-job/*"]
+                        "aws:RequestTag/BedrockModelCustomizationJobArn": [
+                            "arn:aws:bedrock:us-east-1:${{account-id}}:model-customization-job/*"
+                        ]
@@ -239,3 +242,3 @@ JSON
-                   "arn:aws:ec2:${{region}}:${{account-id}}:subnet/${{subnet-id}}",
-                   "arn:aws:ec2:${{region}}:${{account-id}}:subnet/${{subnet-id2}}",
-                   "arn:aws:ec2:${{region}}:${{account-id}}:security-group/security-group-id"
+                    "arn:aws:ec2:us-east-1:${{account-id}}:subnet/${{subnet-id}}",
+                    "arn:aws:ec2:us-east-1:${{account-id}}:subnet/${{subnet-id2}}",
+                    "arn:aws:ec2:us-east-1:${{account-id}}:security-group/security-group-id"
@@ -255,2 +258,2 @@ JSON
-                           "arn:aws:ec2:${{region}}:${{account-id}}:subnet/${{subnet-id}}",
-                           "arn:aws:ec2:${{region}}:${{account-id}}:subnet/${{subnet-id2}}"
+                            "arn:aws:ec2:us-east-1:${{account-id}}:subnet/${{subnet-id}}",
+                            "arn:aws:ec2:us-east-1:${{account-id}}:subnet/${{subnet-id2}}"
@@ -258 +261,3 @@ JSON
-                       "ec2:ResourceTag/BedrockModelCustomizationJobArn": ["arn:aws:bedrock:${{region}}:${{account-id}}:model-customization-job/*"]
+                        "ec2:ResourceTag/BedrockModelCustomizationJobArn": [
+                            "arn:aws:bedrock:us-east-1:${{account-id}}:model-customization-job/*"
+                        ]