AWS parallelcluster documentation change
Summary
Updated multiple ARN patterns in IAM policies to use specific regions, account IDs, and formatting
Security assessment
Policy ARN corrections improve example accuracy but do not explicitly address security vulnerabilities or introduce new security documentation.
Diff
diff --git a/parallelcluster/latest/ug/tutorial-deploy-terraform-permissions.md b/parallelcluster/latest/ug/tutorial-deploy-terraform-permissions.md index ca5ef07cc..96cc4dbe6 100644 --- a//parallelcluster/latest/ug/tutorial-deploy-terraform-permissions.md +++ b//parallelcluster/latest/ug/tutorial-deploy-terraform-permissions.md @@ -8,0 +9,6 @@ You need the following permissions to deploy the ParallelCluster API with Terraf +JSON + + +**** + + @@ -18 +24 @@ You need the following permissions to deploy the ParallelCluster API with Terraf - "Resource": "arn:PARTITION:cloudformation:REGION:ACCOUNT:stack/*", + "Resource": "arn:aws:us-east-1:ACCOUNT:stack/*", @@ -28 +34 @@ You need the following permissions to deploy the ParallelCluster API with Terraf - "Resource": "arn:PARTITION:cloudformation:REGION:ACCOUNT:stack/MyParallelClusterAPI*", + "Resource": "arn:aws:us-east-1:ACCOUNT:stack/MyParallelClusterAPI*", @@ -37,2 +43,2 @@ You need the following permissions to deploy the ParallelCluster API with Terraf - "arn:PARTITION:cloudformation:REGION:aws:transform/Include", - "arn:PARTITION:cloudformation:REGION:aws:transform/Serverless-2016-10-31" + "arn:aws:us-east-1:aws:transform/Include", + "arn:aws:us-east-1:aws:transform/Serverless-2016-10-31" @@ -48,2 +54,2 @@ You need the following permissions to deploy the ParallelCluster API with Terraf - "arn:PARTITION:s3:::*-aws-parallelcluster/parallelcluster/*/api/ParallelCluster.openapi.yaml", - "arn:PARTITION:s3:::*-aws-parallelcluster/parallelcluster/*/layers/aws-parallelcluster/lambda-layer.zip" + "arn:aws:::*-aws-parallelcluster/parallelcluster/*/api/ParallelCluster.openapi.yaml", + "arn:aws:::*-aws-parallelcluster/parallelcluster/*/layers/aws-parallelcluster/lambda-layer.zip" @@ -70,2 +76,2 @@ You need the following permissions to deploy the ParallelCluster API with Terraf - "arn:PARTITION:iam::ACCOUNT:role/*", - "arn:PARTITION:iam::ACCOUNT:policy/*" + "arn:aws::111122223333:role/*", + "arn:aws::111122223333:policy/*" @@ -81,2 +87,2 @@ You need the following permissions to deploy the ParallelCluster API with Terraf - "arn:PARTITION:iam::ACCOUNT:role/ParallelClusterLambdaRole-*", - "arn:PARTITION:iam::ACCOUNT:role/APIGatewayExecutionRole-*" + "arn:aws::111122223333:role/ParallelClusterLambdaRole-*", + "arn:aws::111122223333:role/APIGatewayExecutionRole-*" @@ -99,2 +105,2 @@ You need the following permissions to deploy the ParallelCluster API with Terraf - "arn:PARTITION:lambda:REGION:ACCOUNT:layer:PCLayer-*", - "arn:PARTITION:lambda:REGION:ACCOUNT:function:*-ParallelClusterFunction-*" + "arn:aws:us-east-1:ACCOUNT:layer:PCLayer-*", + "arn:aws:us-east-1:ACCOUNT:function:*-ParallelClusterFunction-*" @@ -115 +121 @@ You need the following permissions to deploy the ParallelCluster API with Terraf - "arn:PARTITION:logs:REGION:ACCOUNT:log-group:/aws/lambda/*-ParallelClusterFunction-*" + "arn:aws:us-east-1:ACCOUNT:log-group:/aws/lambda/*-ParallelClusterFunction-*" @@ -130,3 +136,3 @@ You need the following permissions to deploy the ParallelCluster API with Terraf - "arn:PARTITION:apigateway:REGION::/restapis", - "arn:PARTITION:apigateway:REGION::/restapis/*", - "arn:PARTITION:apigateway:REGION::/tags/*" + "arn:aws:us-east-1::/restapis", + "arn:aws:us-east-1::/restapis/*", + "arn:aws:us-east-1::/tags/*"