AWS systems-manager documentation change
Summary
Updated account ID and region in IAM role ARNs, added explicit region in SSM document ARNs
Security assessment
Standardization of region/account references in policy examples. No security implications identified.
Diff
diff --git a/systems-manager/latest/userguide/change-manager-permissions.md b/systems-manager/latest/userguide/change-manager-permissions.md index a9f25cf60..a09474c2d 100644 --- a//systems-manager/latest/userguide/change-manager-permissions.md +++ b//systems-manager/latest/userguide/change-manager-permissions.md @@ -62 +62 @@ JSON - "Resource": "arn:aws:iam::delegated-admin-account-id:role/AWS-SystemsManager-job-functionAdministrationRole", + "Resource": "arn:aws:iam::111122223333:role/AWS-SystemsManager-job-functionAdministrationRole", @@ -77,2 +77,2 @@ JSON - "arn:aws:ssm:region:account-id:automation-definition/template-name:$DEFAULT", - "arn:aws:ssm:region::document/template-name" + "arn:aws:ssm:us-east-1:account-id:automation-definition/template-name:$DEFAULT", + "arn:aws:ssm:us-east-1::document/template-name"