AWS clean-rooms documentation change

Service: clean-rooms · 2025-07-25 · Documentation low

File: clean-rooms/latest/userguide/ml-roles.md

Summary

Updated AWS resource ARNs to specify 'us-east-1' region and fixed JSON syntax (removed trailing comma)

Security assessment

Changes involve standardizing region references in ARNs and JSON formatting fixes. No security vulnerabilities or security feature additions are mentioned in the diff.

Diff

diff --git a/clean-rooms/latest/userguide/ml-roles.md b/clean-rooms/latest/userguide/ml-roles.md
index 29ef364a8..66f75158e 100644
--- a//clean-rooms/latest/userguide/ml-roles.md
+++ b//clean-rooms/latest/userguide/ml-roles.md
@@ -75,4 +75,4 @@ JSON
-                    "arn:aws:glue:region:accountId:database/databases",
-                    "arn:aws:glue:region:accountId:table/databases/tables",
-                    "arn:aws:glue:region:accountId:catalog",
-                    "arn:aws:glue:region:accountId:database/default"
+                    "arn:aws:glue:us-east-1:accountId:database/databases",
+                    "arn:aws:glue:us-east-1:accountId:table/databases/tables",
+                    "arn:aws:glue:us-east-1:accountId:catalog",
+                    "arn:aws:glue:us-east-1:accountId:database/default"
@@ -87 +87 @@ JSON
-                    "arn:aws:glue:region:accountId:database/default"
+                    "arn:aws:glue:us-east-1:accountId:database/default"
@@ -439 +439 @@ JSON
-                    "s3:ListBucket",
+                    "s3:ListBucket"
@@ -503 +503 @@ JSON
-                    "arn:aws:cleanrooms:region:queryRunnerAccountId:membership/queryRunnerMembershipId"
+                    "arn:aws:cleanrooms:us-east-1:queryRunnerAccountId:membership/queryRunnerMembershipId"
@@ -691 +691 @@ JSON
-                    "arn:aws:kms:region:accountId:key/keyId"
+                    "arn:aws:kms:us-east-1:accountId:key/keyId"
@@ -696 +696 @@ JSON
-                    },
+                    }
@@ -720,2 +720,2 @@ JSON
-                    "arn:aws:logs:region:account-id:log-group:/aws/cleanroomsml/*"
-                ],
+                    "arn:aws:logs:us-east-1:account-id:log-group:/aws/cleanroomsml/*"
+                ]
@@ -776 +775 @@ JSON
-                        "aws:SourceArn": "arn:aws:cleanrooms:region:accountId:membership/membershipID"
+                        "aws:SourceArn": "arn:aws:cleanrooms:us-east-1:accountId:membership/membershipID"
@@ -848 +847 @@ JSON
-                "Resource": "arn:aws:ecr:region:accountID:repository/repoName"
+                "Resource": "arn:aws:ecr:us-east-1:accountID:repository/repoName"
@@ -979 +978 @@ JSON
-                    "arn:aws:cleanrooms:region:queryRunnerAccountId:membership/queryRunnerMembershipId"
+                    "arn:aws:cleanrooms:us-east-1:queryRunnerAccountId:membership/queryRunnerMembershipId"
@@ -1120,3 +1119,3 @@ JSON
-                    "arn:aws:glue:region:accountID:catalog",
-                    "arn:aws:glue:region:accountID:database/Glue database name",
-                    "arn:aws:glue:region:accountID:table/Glue database name/Glue table name"
+                    "arn:aws:glue:us-east-1:accountID:catalog",
+                    "arn:aws:glue:us-east-1:accountID:database/Glue database name",
+                    "arn:aws:glue:us-east-1:accountID:table/Glue database name/Glue table name"
@@ -1184 +1183 @@ JSON
-                "Action": "sts:AssumeRole",
+                "Action": "sts:AssumeRole"