AWS Security ChangesHomeSearch

AWS mwaa documentation change

Service: mwaa · 2025-07-25 · Documentation low

File: mwaa/latest/userguide/access-policies.md

Summary

Multiple updates replacing placeholder account IDs and adding region specifications

Security assessment

Standardized example policies with concrete account numbers and regions for IAM/KMS resources

Diff

diff --git a/mwaa/latest/userguide/access-policies.md b/mwaa/latest/userguide/access-policies.md
index 4fa460b03..fdb07dd3d 100644
--- a//mwaa/latest/userguide/access-policies.md
+++ b//mwaa/latest/userguide/access-policies.md
@@ -135 +135 @@ JSON
-             "Resource":"arn:aws:iam::YOUR_ACCOUNT_ID:policy/service-role/MWAA-Execution-Policy*"
+                "Resource": "arn:aws:iam::111122223333:policy/service-role/MWAA-Execution-Policy*"
@@ -143 +143 @@ JSON
-             "Resource":"arn:aws:iam::YOUR_ACCOUNT_ID:role/service-role/AmazonMWAA*"
+                "Resource": "arn:aws:iam::111122223333:role/service-role/AmazonMWAA*"
@@ -261 +261 @@ JSON
-             "Resource":"arn:aws:iam::YOUR_ACCOUNT_ID:policy/service-role/MWAA-Execution-Policy*"
+                "Resource": "arn:aws:iam::111122223333:policy/service-role/MWAA-Execution-Policy*"
@@ -269 +269 @@ JSON
-             "Resource":"arn:aws:iam::YOUR_ACCOUNT_ID:role/service-role/AmazonMWAA*"
+                "Resource": "arn:aws:iam::111122223333:role/service-role/AmazonMWAA*"
@@ -334 +334 @@ JSON
-             "Resource":"arn:aws:kms:*:YOUR_ACCOUNT_ID:key/YOUR_KMS_ID"
+                "Resource": "arn:aws:kms:*:111122223333:key/YOUR_KMS_ID"
@@ -505 +505 @@ JSON
-             "Resource":"arn:aws:kms:*:YOUR_ACCOUNT_ID:key/YOUR_KMS_ID"
+                "Resource": "arn:aws:kms:*:111122223333:key/YOUR_KMS_ID"
@@ -583 +583 @@ JSON
-                    "arn:aws:airflow:{your-region}:YOUR_ACCOUNT_ID:role/{your-environment-name}/{airflow-role}"
+                    "arn:aws:airflow:us-east-1:YOUR_ACCOUNT_ID:role/{your-environment-name}/{airflow-role}"
@@ -618 +618 @@ JSON
-            "arn:aws:airflow:{your-region}:YOUR_ACCOUNT_ID:role/{your-environment-name}/{airflow-role}"
+                    "arn:aws:airflow:us-east-1:YOUR_ACCOUNT_ID:role/{your-environment-name}/{airflow-role}"
@@ -653 +653 @@ JSON
-                "Resource": "arn:aws:airflow:${Region}:${Account}:environment/${EnvironmentName}"
+                "Resource": "arn:aws:airflow:us-east-1:${Account}:environment/${EnvironmentName}"