AWS documentdb documentation change
Summary
Updated AWS resource ARNs to hardcode 'us-east-1' region and specific account ID (111122223333) in CloudFormation examples
Security assessment
Changes involve standardizing example ARNs with a specific region and account ID placeholder. No evidence of addressing a security vulnerability or weakness. This appears to be documentation cleanup for consistency rather than a security-related update.
Diff
diff --git a/documentdb/latest/developerguide/quick_start_cfn.md b/documentdb/latest/developerguide/quick_start_cfn.md index d86432f24..e8c728e61 100644 --- a//documentdb/latest/developerguide/quick_start_cfn.md +++ b//documentdb/latest/developerguide/quick_start_cfn.md @@ -133,2 +133,2 @@ JSON - "arn:aws:logs:{AWS_REGION}:{AWS_ACCOUNT_ID}:log-group:/aws/docdb/*", - "arn:aws:logs:{AWS_REGION}:{AWS_ACCOUNT_ID}:log-group:/aws/docdb/*:log-stream:*" + "arn:aws:logs:us-east-1:{AWS_ACCOUNT_ID}:log-group:/aws/docdb/*", + "arn:aws:logs:us-east-1:{AWS_ACCOUNT_ID}:log-group:/aws/docdb/*:log-stream:*" @@ -147 +147 @@ JSON - "Resource": "arn:aws:kms:{AWS_REGION}:{AWS_ACCOUNT_ID}:key/*" + "Resource": "arn:aws:kms:us-east-1:{AWS_ACCOUNT_ID}:key/*" @@ -157 +157 @@ JSON - "Resource": "arn:aws:kms:{AWS_REGION}:{AWS_ACCOUNT_ID}:key/*", + "Resource": "arn:aws:kms:us-east-1:{AWS_ACCOUNT_ID}:key/*", @@ -161 +161 @@ JSON - "rds.{AWS_REGION}.amazonaws.com" + "rds.us-east-1.amazonaws.com" @@ -170 +170 @@ JSON - "Resource": "arn:aws:iam::{AWS_ACCOUNT_ID}:role/aws-service-role/rds.amazonaws.com/AWSServiceRoleForRDS", + "Resource": "arn:aws:iam::111122223333:role/aws-service-role/rds.amazonaws.com/AWSServiceRoleForRDS",