AWS drs documentation change
Summary
Replaced placeholder account IDs with '111122223333' in cross-account IAM policy examples
Security assessment
Updates improve clarity of security-related IAM policies for cross-account access in DRS, but there is no indication these changes address an active security issue. The modifications standardize example policies, which helps prevent misconfiguration risks.
Diff
diff --git a/drs/latest/userguide/adding-trusted-account.md b/drs/latest/userguide/adding-trusted-account.md index 5209f65f7..07a56dd0d 100644 --- a//drs/latest/userguide/adding-trusted-account.md +++ b//drs/latest/userguide/adding-trusted-account.md @@ -175 +175 @@ JSON - "AWS": "arn:aws:iam::targetAccount:root" + "AWS": "arn:aws:iam::111122223333:root" @@ -183 +183 @@ JSON - "aws:PrincipalArn": "arn:aws:iam::targetAccount:role/service-role/DRSCrossAccountAgentAuthorizedRole_sourceAccount" + "aws:PrincipalArn": "arn:aws:iam::111122223333:role/service-role/DRSCrossAccountAgentAuthorizedRole_sourceAccount" @@ -190 +190 @@ JSON - "AWS": "arn:aws:iam::targetAccount:root" + "AWS": "arn:aws:iam::111122223333:root" @@ -198 +198 @@ JSON - "aws:PrincipalArn": "arn:aws:iam::targetAccount:role/service-role/DRSCrossAccountAgentAuthorizedRole_sourceAccount" + "aws:PrincipalArn": "arn:aws:iam::111122223333:role/service-role/DRSCrossAccountAgentAuthorizedRole_sourceAccount" @@ -225 +225 @@ JSON - "AWS": "arn:aws:iam::account-id:root" + "AWS": "arn:aws:iam::111122223333:root" @@ -261 +261 @@ JSON - "Resource": "arn:aws:iam::trustedAccount:role/service-role/DRSCrossAccountAgentRole_sourceAccount", + "Resource": "arn:aws:iam::111122223333:role/service-role/DRSCrossAccountAgentRole_sourceAccount", @@ -273 +273 @@ JSON - "Resource": "arn:aws:iam::trustedAccount:role/service-role/DRSCrossAccountAgentRole_sourceAccount", + "Resource": "arn:aws:iam::111122223333:role/service-role/DRSCrossAccountAgentRole_sourceAccount",