AWS sagemaker documentation change
Summary
Updated example account IDs and added region specificity in KMS ARN
Security assessment
Changes only standardize example configurations with concrete account numbers and regions, improving clarity but not addressing security issues or adding security documentation
Diff
diff --git a/sagemaker/latest/dg/canvas-permissions-cross-account.md b/sagemaker/latest/dg/canvas-permissions-cross-account.md index 8627a320b..696f3900f 100644 --- a//sagemaker/latest/dg/canvas-permissions-cross-account.md +++ b//sagemaker/latest/dg/canvas-permissions-cross-account.md @@ -92 +92 @@ JSON - "AWS": "arn:aws:iam::accountB:role/roleB" + "AWS": "arn:aws:iam::111122223333:role/roleB" @@ -104 +104 @@ JSON - "AWS": "arn:aws:iam::accountB:role/roleB" + "AWS": "arn:aws:iam::111122223333:role/roleB" @@ -178 +178 @@ JSON - "Resource": "arn:aws:kms:{region}:accountA:key/s3KmsInAccountA" + "Resource": "arn:aws:kms:us-east-1:accountA:key/s3KmsInAccountA" @@ -200 +200 @@ JSON - "AWS": "arn:aws:iam::accountB:role/roleB" + "AWS": "arn:aws:iam::111122223333:role/roleB" @@ -212 +212 @@ JSON - "AWS": "arn:aws:iam::accountB:role/roleB" + "AWS": "arn:aws:iam::111122223333:role/roleB"