AWS bedrock documentation change
Summary
Updated KMS ARNs to us-east-1, replaced placeholder account IDs, and adjusted service endpoints
Security assessment
Regional and example ARN updates in encryption policies. Changes maintain existing security practices without addressing vulnerabilities.
Diff
diff --git a/bedrock/latest/userguide/rag-evaluation-security-data.md b/bedrock/latest/userguide/rag-evaluation-security-data.md index cfab4d5bd..bbe042b74 100644 --- a//bedrock/latest/userguide/rag-evaluation-security-data.md +++ b//bedrock/latest/userguide/rag-evaluation-security-data.md @@ -80 +80 @@ JSON - "arn:aws:kms:region:account-id:key/*" + "arn:aws:kms:us-east-1:account-id:key/*" @@ -85 +85 @@ JSON - "s3.region.amazonaws.com" + "s3.us-east-1.amazonaws.com" @@ -98 +98 @@ JSON - "arn:aws:kms:region:account-id:key/*" + "arn:aws:kms:us-east-1:account-id:key/*" @@ -113 +113 @@ JSON - "arn:aws:kms:region:account-id:key/*" + "arn:aws:kms:us-east-1:account-id:key/*" @@ -128 +128 @@ JSON - "arn:aws:kms:region:account-id:key/*" + "arn:aws:kms:us-east-1:account-id:key/*" @@ -136 +136 @@ JSON - "bedrock.region.amazonaws.com" + "bedrock.us-east-1.amazonaws.com" @@ -148 +148 @@ JSON - "arn:aws:kms:region:account-id:key/*" + "arn:aws:kms:us-east-1:account-id:key/*" @@ -157 +157 @@ JSON - "bedrock.region.amazonaws.com" + "bedrock.us-east-1.amazonaws.com" @@ -169 +169 @@ JSON - "arn:aws:kms:region:account-id:key/*" + "arn:aws:kms:us-east-1:account-id:key/*" @@ -196 +196 @@ JSON - "AWS": "arn:aws:iam::account-id:role/CustomerProvidedRole" + "AWS": "arn:aws:iam::111122223333:role/CustomerProvidedRole" @@ -212 +212 @@ JSON - "AWS": "arn:aws:iam::account-id:role/CustomerProvidedRole" + "AWS": "arn:aws:iam::111122223333:role/CustomerProvidedRole" @@ -227 +227 @@ JSON - "AWS": "arn:aws:iam::account-id:role/CustomerProvidedRole" + "AWS": "arn:aws:iam::111122223333:role/CustomerProvidedRole" @@ -239 +239 @@ JSON - "bedrock.region.amazonaws.com" + "bedrock.us-east-1.amazonaws.com" @@ -248 +248 @@ JSON - "AWS": "arn:aws:iam::account-id:role/CustomerProvidedRole" + "AWS": "arn:aws:iam::111122223333:role/CustomerProvidedRole" @@ -259 +259 @@ JSON - "bedrock.region.amazonaws.com" + "bedrock.us-east-1.amazonaws.com" @@ -268 +268 @@ JSON - "AWS": "arn:aws:iam::account-id:role/CustomerProvidedRole" + "AWS": "arn:aws:iam::111122223333:role/CustomerProvidedRole" @@ -277 +277 @@ JSON - "kms:ViaService": "s3.region.amazonaws.com" + "kms:ViaService": "s3.us-east-1.amazonaws.com" @@ -351 +351 @@ JSON - "arn:aws:kms:region:account-id:key/keyYouUse" + "arn:aws:kms:us-east-1:account-id:key/keyYouUse"