AWS bedrock documentation change

Service: bedrock · 2025-07-25 · Documentation low

File: bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md

Summary

Adjusted OpenSearch ARN partitions to 'aws' and improved JSON formatting in policy examples

Security assessment

ARN partition corrections and formatting changes do not address security vulnerabilities or introduce security features.

Diff

diff --git a/bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md b/bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md
index d7e076a8a..689dfdccd 100644
--- a//bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md
+++ b//bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md
@@ -29 +29 @@ JSON
-          "Resource": "arn:<partition>:es:<region>:<accountId>:domain/<domainName>"
+                "Resource": "arn:aws:<region>:<accountId>:domain/<domainName>"
@@ -88 +88,2 @@ JSON
-        "Statement": [{
+        "Statement": [
+            {
@@ -98 +99 @@ JSON
-                "arn:<partition>:es:<region>:<accountId>:domain/<domainName>/<indexName>/*"
+                    "arn:aws:<region>:<accountId>:domain/<domainName>/<indexName>/*"
@@ -109 +110 @@ JSON
-                "arn:<partition>:es:<region>:<accountId>:domain/<domainName>/<indexName>"
+                    "arn:aws:<region>:<accountId>:domain/<domainName>/<indexName>"
@@ -119 +120,3 @@ JSON
-                "arn:<partition>:es:<region>:<accountId>:domain/<domainName>"
+                    "arn:aws:<region>:<accountId>:domain/<domainName>"
+                ]
+            }
@@ -121 +123,0 @@ JSON
-        }]
@@ -143 +145 @@ JSON
-                    "arn:<partition>:iam::<accountId>:role/service-role/<KnowledgeBaseServiceRoleName>"
+                        "arn:aws::<accountId>:role/service-role/<KnowledgeBaseServiceRoleName>"
@@ -153 +155 @@ JSON
-            "arn:<partition>:es:<region>:<accountId>:domain/<domainName>/<indexName>/*"
+                    "arn:aws:<region>:<accountId>:domain/<domainName>/<indexName>/*"
@@ -160 +162 @@ JSON
-                  "arn:<partition>:iam::<accountId>:(role|service-role)/<KnowledgeBaseServiceRoleName>"
+                        "arn:aws::<accountId>:(role|service-role)/<KnowledgeBaseServiceRoleName>"
@@ -165 +167 @@ JSON
-              "arn:<partition>:es:<region>:<accountId>:domain/<domainName>/<indexName>"
+                    "arn:aws:<region>:<accountId>:domain/<domainName>/<indexName>"
@@ -172 +174 @@ JSON
-                    "arn:<partition>:iam::<accountId>:(role|service-role)/<KnowledgeBaseServiceRoleName>"
+                        "arn:aws::<accountId>:(role|service-role)/<KnowledgeBaseServiceRoleName>"
@@ -177 +179 @@ JSON
-              "arn:<partition>:es:<region>:<accountId>:domain/<domainName>"
+                    "arn:aws:<region>:<accountId>:domain/<domainName>"