AWS mwaa documentation change
Summary
Multiple updates replacing placeholder account IDs and adding region specifications
Security assessment
Standardized example policies with concrete account numbers and regions for IAM/KMS resources
Diff
diff --git a/mwaa/latest/userguide/access-policies.md b/mwaa/latest/userguide/access-policies.md index 4fa460b03..fdb07dd3d 100644 --- a//mwaa/latest/userguide/access-policies.md +++ b//mwaa/latest/userguide/access-policies.md @@ -135 +135 @@ JSON - "Resource":"arn:aws:iam::YOUR_ACCOUNT_ID:policy/service-role/MWAA-Execution-Policy*" + "Resource": "arn:aws:iam::111122223333:policy/service-role/MWAA-Execution-Policy*" @@ -143 +143 @@ JSON - "Resource":"arn:aws:iam::YOUR_ACCOUNT_ID:role/service-role/AmazonMWAA*" + "Resource": "arn:aws:iam::111122223333:role/service-role/AmazonMWAA*" @@ -261 +261 @@ JSON - "Resource":"arn:aws:iam::YOUR_ACCOUNT_ID:policy/service-role/MWAA-Execution-Policy*" + "Resource": "arn:aws:iam::111122223333:policy/service-role/MWAA-Execution-Policy*" @@ -269 +269 @@ JSON - "Resource":"arn:aws:iam::YOUR_ACCOUNT_ID:role/service-role/AmazonMWAA*" + "Resource": "arn:aws:iam::111122223333:role/service-role/AmazonMWAA*" @@ -334 +334 @@ JSON - "Resource":"arn:aws:kms:*:YOUR_ACCOUNT_ID:key/YOUR_KMS_ID" + "Resource": "arn:aws:kms:*:111122223333:key/YOUR_KMS_ID" @@ -505 +505 @@ JSON - "Resource":"arn:aws:kms:*:YOUR_ACCOUNT_ID:key/YOUR_KMS_ID" + "Resource": "arn:aws:kms:*:111122223333:key/YOUR_KMS_ID" @@ -583 +583 @@ JSON - "arn:aws:airflow:{your-region}:YOUR_ACCOUNT_ID:role/{your-environment-name}/{airflow-role}" + "arn:aws:airflow:us-east-1:YOUR_ACCOUNT_ID:role/{your-environment-name}/{airflow-role}" @@ -618 +618 @@ JSON - "arn:aws:airflow:{your-region}:YOUR_ACCOUNT_ID:role/{your-environment-name}/{airflow-role}" + "arn:aws:airflow:us-east-1:YOUR_ACCOUNT_ID:role/{your-environment-name}/{airflow-role}" @@ -653 +653 @@ JSON - "Resource": "arn:aws:airflow:${Region}:${Account}:environment/${EnvironmentName}" + "Resource": "arn:aws:airflow:us-east-1:${Account}:environment/${EnvironmentName}"