AWS kendra documentation change
Summary
Updated AWS resource ARNs in IAM policy examples to standardize region references to 'us-east-1' across all policy statements
Security assessment
Changes only modify region placeholders ('your-region') to 'us-east-1' in resource ARNs and service endpoints. This appears to be documentation standardization rather than addressing security vulnerabilities. No security features added or vulnerabilities patched - simply makes example policies more consistent.
Diff
diff --git a/kendra/latest/dg/iam-roles.md b/kendra/latest/dg/iam-roles.md index dfc88de3c..81bedcfdc 100644 --- a//kendra/latest/dg/iam-roles.md +++ b//kendra/latest/dg/iam-roles.md @@ -74 +74 @@ JSON - "Resource": "arn:aws:logs:your-region:your-account-id:log-group:/aws/kendra/*" + "Resource": "arn:aws:logs:us-east-1:your-account-id:log-group:/aws/kendra/*" @@ -83 +83 @@ JSON - "Resource": "arn:aws:logs:your-region:your-account-id:log-group:/aws/kendra/*:log-stream:*" + "Resource": "arn:aws:logs:us-east-1:your-account-id:log-group:/aws/kendra/*:log-stream:*" @@ -119 +119 @@ JSON - "Resource":"arn:aws:logs:your-region:your-account-id:log-group:/aws/kendra/*" + "Resource": "arn:aws:logs:us-east-1:your-account-id:log-group:/aws/kendra/*" @@ -128 +128 @@ JSON - "Resource":"arn:aws:logs:your-region:your-account-id:log-group:/aws/kendra/*:log-stream:*" + "Resource": "arn:aws:logs:us-east-1:your-account-id:log-group:/aws/kendra/*:log-stream:*" @@ -136 +136 @@ JSON - "arn:aws:secretsmanager:your-region:your-account-id:secret:secret-id" + "arn:aws:secretsmanager:us-east-1:your-account-id:secret:secret-id" @@ -145 +145 @@ JSON - "arn:aws:kms:your-region:your-account-id:key/key-id" + "arn:aws:kms:us-east-1:your-account-id:key/key-id" @@ -150 +150 @@ JSON - "secretsmanager.your-region.amazonaws.com" + "secretsmanager.us-east-1.amazonaws.com" @@ -289 +289 @@ JSON - "arn:aws:kms:your-region:your-account-id:key/key-id" + "arn:aws:kms:us-east-1:your-account-id:key/key-id" @@ -331 +331 @@ JSON - "arn:aws:secretsmanager:{{your-region}}:{{your-account-id}}:secret:[[secret-id]]" + "arn:aws:secretsmanager:us-east-1:{{your-account-id}}:secret:[[secret-id]]" @@ -340 +340 @@ JSON - "arn:aws:kms:{{your-region}}:{{your-account-id}}:key/[[key-id]]" + "arn:aws:kms:us-east-1:{{your-account-id}}:key/[[key-id]]" @@ -345 +345 @@ JSON - "secretsmanager.{{your-region}}.amazonaws.com" + "secretsmanager.us-east-1.amazonaws.com" @@ -358 +358,4 @@ JSON - "Resource": ["arn:aws:kendra:{{your-region}}:{{your-account-id}}:index/{{index-id}}", "arn:aws:kendra:{{your-region}}:{{your-account-id}}:index/{{index-id}}/data-source/*"] + "Resource": [ + "arn:aws:kendra:us-east-1:{{your-account-id}}:index/{{index-id}}", + "arn:aws:kendra:us-east-1:{{your-account-id}}:index/{{index-id}}/data-source/*" + ] @@ -366,2 +369,3 @@ JSON - "Resource": "arn:aws:kendra:{{your-region}}:{{your-account-id}}:index/{{index-id}}" - }] + "Resource": "arn:aws:kendra:us-east-1:{{your-account-id}}:index/{{index-id}}" + } + ] @@ -425 +429 @@ JSON - "arn:aws:secretsmanager:{{your-region}}:{{your-account-id}}:secret:[[secret-id]]" + "arn:aws:secretsmanager:us-east-1:{{your-account-id}}:secret:[[secret-id]]" @@ -434 +438 @@ JSON - "arn:aws:kms:{{your-region}}:{{your-account-id}}:key/[[key-id]]" + "arn:aws:kms:us-east-1:{{your-account-id}}:key/[[key-id]]" @@ -439 +443 @@ JSON - "secretsmanager.{{your-region}}.amazonaws.com" + "secretsmanager.us-east-1.amazonaws.com" @@ -452 +456,4 @@ JSON - "Resource": ["arn:aws:kendra:{{your-region}}:{{your-account-id}}:index/{{index-id}}", "arn:aws:kendra:{{your-region}}:{{your-account-id}}:index/{{index-id}}/data-source/*"] + "Resource": [ + "arn:aws:kendra:us-east-1:{{your-account-id}}:index/{{index-id}}", + "arn:aws:kendra:us-east-1:{{your-account-id}}:index/{{index-id}}/data-source/*" + ] @@ -460,2 +467,3 @@ JSON - "Resource": "arn:aws:kendra:{{your-region}}:{{your-account-id}}:index/{{index-id}}" - }] + "Resource": "arn:aws:kendra:us-east-1:{{your-account-id}}:index/{{index-id}}" + } + ] @@ -519 +527 @@ JSON - "arn:aws:secretsmanager:{{region}}:{{account_id}}:secret:[[secret_id]]" + "arn:aws:secretsmanager:us-east-1:{111122223333}:secret:[[secret_id]]" @@ -528 +536 @@ JSON - "arn:aws:kms:{{region}}:{{account_id}}:key/[[key_id]]" + "arn:aws:kms:us-east-1:{111122223333}:key/[[key_id]]" @@ -546 +554,4 @@ JSON - "Resource": ["arn:aws:kendra:{{region}}:{{account_id}}:index/{{index_id}}", "arn:aws:kendra:{{region}}:{{account_id}}:index/{{index_id}}/data-source/*"] + "Resource": [ + "arn:aws:kendra:us-east-1:{111122223333}:index/{{index_id}}", + "arn:aws:kendra:us-east-1:{111122223333}:index/{{index_id}}/data-source/*" + ] @@ -554,2 +565,3 @@ JSON - "Resource": "arn:aws:kendra:{{region}}:{{account_id}}:index/{{index_id}}" - }] + "Resource": "arn:aws:kendra:us-east-1:{111122223333}:index/{{index_id}}" + } + ] @@ -613 +625 @@ JSON - "arn:aws:secretsmanager:{{region}}:{{account_id}}:secret:[[secret_id]]" + "arn:aws:secretsmanager:us-east-1:{111122223333}:secret:[[secret_id]]" @@ -622 +634 @@ JSON - "arn:aws:kms:{{region}}:{{account_id}}:key/[[key_id]]" + "arn:aws:kms:us-east-1:{111122223333}:key/[[key_id]]" @@ -640 +652,4 @@ JSON - "Resource": ["arn:aws:kendra:{{region}}:{{account_id}}:index/{{index_id}}", "arn:aws:kendra:{{region}}:{{account_id}}:index/{{index_id}}/data-source/*"] + "Resource": [ + "arn:aws:kendra:us-east-1:{111122223333}:index/{{index_id}}", + "arn:aws:kendra:us-east-1:{111122223333}:index/{{index_id}}/data-source/*" + ] @@ -648,2 +663,3 @@ JSON - "Resource": "arn:aws:kendra:{{region}}:{{account_id}}:index/{{index_id}}" - }] + "Resource": "arn:aws:kendra:us-east-1:{111122223333}:index/{{index_id}}" + } + ] @@ -707 +723 @@ JSON - "arn:aws:secretsmanager:{{your-region}}:{{your-account-id}}:secret:{{secret-id}}" + "arn:aws:secretsmanager:us-east-1:{{your-account-id}}:secret:{{secret-id}}" @@ -716 +732 @@ JSON - "arn:aws:kms:{{your-region}}:{{your-account-id}}:key/{{key-id}}" + "arn:aws:kms:us-east-1:{{your-account-id}}:key/{{key-id}}" @@ -721 +737 @@ JSON - "secretsmanager.{{your-region}}.amazonaws.com" + "secretsmanager.us-east-1.amazonaws.com" @@ -734 +750 @@ JSON - "arn:aws:ec2:{{your-region}}:{{your-account-id}}:subnet/[[subnet-ids]]" + "arn:aws:ec2:us-east-1:{{your-account-id}}:subnet/[[subnet-ids]]" @@ -757 +773 @@ JSON - "arn:aws:ec2:{{your-region}}:{{your-account-id}}:subnet/[[subnet-ids]]" + "arn:aws:ec2:us-east-1:{{your-account-id}}:subnet/[[subnet-ids]]" @@ -795 +811 @@ JSON - "Resource": "arn:aws:kendra:{{your-region}}:{{your-account-id}}:index/{{index-id}}" + "Resource": "arn:aws:kendra:us-east-1:{{your-account-id}}:index/{{index-id}}" @@ -911 +927 @@ JSON - "arn:aws:kms:your-region:your-account-id:key/key-id" + "arn:aws:kms:us-east-1:your-account-id:key/key-id" @@ -974 +990 @@ JSON - "arn:aws:secretsmanager:{{region}}:{{account_id}}:secret:[[secret_id]]" + "arn:aws:secretsmanager:us-east-1:{111122223333}:secret:[[secret_id]]" @@ -983 +999 @@ JSON - "arn:aws:kms:{{region}}:{{account_id}}:key/[[key_id]]" + "arn:aws:kms:us-east-1:{111122223333}:key/[[key_id]]" @@ -1001 +1017,4 @@ JSON - "Resource": ["arn:aws:kendra:{{region}}:{{account_id}}:index/{{index_id}}", "arn:aws:kendra:{{region}}:{{account_id}}:index/{{index_id}}/data-source/*"] + "Resource": [ + "arn:aws:kendra:us-east-1:{111122223333}:index/{{index_id}}", + "arn:aws:kendra:us-east-1:{111122223333}:index/{{index_id}}/data-source/*" + ] @@ -1009,2 +1028,3 @@ JSON - "Resource": "arn:aws:kendra:{{region}}:{{account_id}}:index/{{index_id}}" - }] + "Resource": "arn:aws:kendra:us-east-1:{111122223333}:index/{{index_id}}" + } + ] @@ -1068 +1088 @@ JSON - "arn:aws:secretsmanager:{{region}}:{{account_id}}:secret:[[secret_id]]" + "arn:aws:secretsmanager:us-east-1:{111122223333}:secret:[[secret_id]]" @@ -1077 +1097 @@ JSON - "arn:aws:kms:{{region}}:{{account_id}}:key/[[key_id]]" + "arn:aws:kms:us-east-1:{111122223333}:key/[[key_id]]" @@ -1095 +1115,4 @@ JSON - "Resource": ["arn:aws:kendra:{{region}}:{{account_id}}:index/{{index_id}}", "arn:aws:kendra:{{region}}:{{account_id}}:index/{{index_id}}/data-source/*"] + "Resource": [ + "arn:aws:kendra:us-east-1:{111122223333}:index/{{index_id}}", + "arn:aws:kendra:us-east-1:{111122223333}:index/{{index_id}}/data-source/*" + ] @@ -1103,2 +1126,3 @@ JSON - "Resource": "arn:aws:kendra:{{region}}:{{account_id}}:index/{{index_id}}" - }] + "Resource": "arn:aws:kendra:us-east-1:{111122223333}:index/{{index_id}}" + } + ] @@ -1162 +1186 @@ JSON - "arn:aws:secretsmanager:{{region}}:{{account_id}}:secret:[[secret_id]]" + "arn:aws:secretsmanager:us-east-1:{111122223333}:secret:[[secret_id]]" @@ -1171 +1195 @@ JSON - "arn:aws:kms:{{region}}:{{account_id}}:key/[[key_id]]" + "arn:aws:kms:us-east-1:{111122223333}:key/[[key_id]]" @@ -1189 +1213,4 @@ JSON - "Resource": ["arn:aws:kendra:{{region}}:{{account_id}}:index/{{index_id}}", "arn:aws:kendra:{{region}}:{{account_id}}:index/{{index_id}}/data-source/*"] + "Resource": [ + "arn:aws:kendra:us-east-1:{111122223333}:index/{{index_id}}", + "arn:aws:kendra:us-east-1:{111122223333}:index/{{index_id}}/data-source/*" + ] @@ -1197,2 +1224,3 @@ JSON - "Resource": "arn:aws:kendra:{{region}}:{{account_id}}:index/{{index_id}}" - }] + "Resource": "arn:aws:kendra:us-east-1:{111122223333}:index/{{index_id}}" + } + ] @@ -1256 +1284 @@ JSON - "arn:aws:secretsmanager:{{region}}:{{account_id}}:secret:[[secret_id]]" + "arn:aws:secretsmanager:us-east-1:{111122223333}:secret:[[secret_id]]" @@ -1265 +1293 @@ JSON - "arn:aws:kms:{{region}}:{{account_id}}:key/[[key_id]]" + "arn:aws:kms:us-east-1:{111122223333}:key/[[key_id]]" @@ -1283 +1311,4 @@ JSON - "Resource": ["arn:aws:kendra:{{region}}:{{account_id}}:index/{{index_id}}", "arn:aws:kendra:{{region}}:{{account_id}}:index/{{index_id}}/data-source/*"] + "Resource": [ + "arn:aws:kendra:us-east-1:{111122223333}:index/{{index_id}}", + "arn:aws:kendra:us-east-1:{111122223333}:index/{{index_id}}/data-source/*" + ] @@ -1291,2 +1322,3 @@ JSON - "Resource": "arn:aws:kendra:{{region}}:{{account_id}}:index/{{index_id}}" - }] + "Resource": "arn:aws:kendra:us-east-1:{111122223333}:index/{{index_id}}" + } + ] @@ -1364 +1396 @@ JSON