AWS sagemaker documentation change
Summary
Updated example ARNs with specific region (us-east-1) and account ID values in IAM policy examples
Security assessment
Changes are example ARN standardization without altering security semantics. Regional specificity improves accuracy but doesn't introduce new security controls or address vulnerabilities.
Diff
diff --git a/sagemaker/latest/dg/sagemaker-roles.md b/sagemaker/latest/dg/sagemaker-roles.md index b08d7ddaf..dfafd9bad 100644 --- a//sagemaker/latest/dg/sagemaker-roles.md +++ b//sagemaker/latest/dg/sagemaker-roles.md @@ -604 +604 @@ JSON - "Resource": "arn:aws:kms:region:account-id:key/kms-key-id" + "Resource": "arn:aws:kms:us-east-1:account-id:key/kms-key-id" @@ -627 +627 @@ JSON - "arn:aws:iam::account-id:role/ExecutionRole" + "arn:aws:iam::111122223333:role/ExecutionRole" @@ -821,3 +821,3 @@ JSON - "arn:aws:ecr:region::repository/my-repo1", - "arn:aws:ecr:region::repository/my-repo2", - "arn:aws:ecr:region::repository/my-repo3" + "arn:aws:ecr:us-east-1::repository/my-repo1", + "arn:aws:ecr:us-east-1::repository/my-repo2", + "arn:aws:ecr:us-east-1::repository/my-repo3" @@ -944 +944 @@ JSON - "Resource": "arn:aws:ecr:region::repository/my-repo" + "Resource": "arn:aws:ecr:us-east-1::repository/my-repo" @@ -1117 +1116 @@ JSON - "Resource": "arn:aws:ecr:region::repository/my-repo" + "Resource": "arn:aws:ecr:us-east-1::repository/my-repo" @@ -1273 +1272 @@ JSON - "Resource": "arn:aws:ecr:region::repository/my-repo" + "Resource": "arn:aws:ecr:us-east-1::repository/my-repo" @@ -1423,2 +1421,2 @@ JSON - "arn:aws:ecr:region::repository/my-repo", - "arn:aws:ecr:region::repository/my-repo" + "arn:aws:ecr:us-east-1::repository/my-repo", + "arn:aws:ecr:us-east-1::repository/my-repo"