AWS clean-rooms documentation change
Summary
Updated AWS resource ARNs to specify 'us-east-1' region in IAM policy examples
Security assessment
Changes standardize region references in policy examples but do not introduce or modify security controls. No evidence of addressing security vulnerabilities.
Diff
diff --git a/clean-rooms/latest/userguide/setting-up-roles.md b/clean-rooms/latest/userguide/setting-up-roles.md index 581d99fca..ccf80582f 100644 --- a//clean-rooms/latest/userguide/setting-up-roles.md +++ b//clean-rooms/latest/userguide/setting-up-roles.md @@ -277,2 +276,2 @@ JSON - "arn:aws:athena:region:accountId:workgroup/workgroup", - "arn:aws:athena:region:accountId:datacatalog/AwsDataCatalog" + "arn:aws:athena:us-east-1:accountId:workgroup/workgroup", + "arn:aws:athena:us-east-1:accountId:datacatalog/AwsDataCatalog" @@ -289,3 +288,3 @@ JSON - "arn:aws:glue:region:accountId:catalog", - "arn:aws:glue:region:accountId:database/database name", - "arn:aws:glue:region:accountId:table/database name/table name" + "arn:aws:glue:us-east-1:accountId:catalog", + "arn:aws:glue:us-east-1:accountId:database/database name", + "arn:aws:glue:us-east-1:accountId:table/database name/table name" @@ -320 +319 @@ JSON - "Resource": "arn:aws:kms:region:accountId:key/*" + "Resource": "arn:aws:kms:us-east-1:accountId:key/*" @@ -396,2 +395,2 @@ JSON - "arn:aws:cleanrooms:region:accountId:membership/membershipId", - "arn:aws:cleanrooms:region:queryRunnerAccountId:membership/queryRunnerMembershipId" + "arn:aws:cleanrooms:us-east-1:accountId:membership/membershipId", + "arn:aws:cleanrooms:us-east-1:queryRunnerAccountId:membership/queryRunnerMembershipId" @@ -421 +420 @@ JSON - "Resource": "arn:aws:secretsmanager:region:secretAccountId:secret:secretIdentifier", + "Resource": "arn:aws:secretsmanager:us-east-1:secretAccountId:secret:secretIdentifier", @@ -427 +426 @@ JSON - "Resource": "arn:aws:kms:region:keyOwnerAccountId:key/keyIdentifier", + "Resource": "arn:aws:kms:us-east-1:keyOwnerAccountId:key/keyIdentifier", @@ -431 +430 @@ JSON - "kms:ViaService": "secretsmanager.region.amazonaws.com", + "kms:ViaService": "secretsmanager.us-east-1.amazonaws.com", @@ -453 +452 @@ JSON - "Resource": "arn:aws:secretsmanager:region:accountId:secret:secretIdentifier", + "Resource": "arn:aws:secretsmanager:us-east-1:accountId:secret:secretIdentifier", @@ -495,2 +494,2 @@ JSON - "arn:aws:cleanrooms:region:jobRunnerAccountId:membership/jobRunnerMembershipId", - "arn:aws:cleanrooms:region:analysisTemplateAccountId:membership/analysisTemplateOwnerMembershipId" + "arn:aws:cleanrooms:us-east-1:jobRunnerAccountId:membership/jobRunnerMembershipId", + "arn:aws:cleanrooms:us-east-1:analysisTemplateAccountId:membership/analysisTemplateOwnerMembershipId" @@ -590,2 +589,2 @@ JSON - "arn:aws:cleanrooms:region:jobRunnerAccountId:membership/jobRunnerMembershipId", - "arn:aws:cleanrooms:region:rrAccountId:membership/rrMembershipId" + "arn:aws:cleanrooms:us-east-1:jobRunnerAccountId:membership/jobRunnerMembershipId", + "arn:aws:cleanrooms:us-east-1:rrAccountId:membership/rrMembershipId"