AWS systems-manager-automation-runbooks documentation change
Summary
Updated resource ARNs in IAM policy examples to use 'aws' partition and concrete account IDs
Security assessment
Formatting changes to standardize policy examples. VPC Flow Logs are a security monitoring tool, but these updates don't modify security guidance or address vulnerabilities.
Diff
diff --git a/systems-manager-automation-runbooks/latest/userguide/automation-aws-enable-vpc-flowlogs.md b/systems-manager-automation-runbooks/latest/userguide/automation-aws-enable-vpc-flowlogs.md index 922efea3d..ccf0741bf 100644 --- a//systems-manager-automation-runbooks/latest/userguide/automation-aws-enable-vpc-flowlogs.md +++ b//systems-manager-automation-runbooks/latest/userguide/automation-aws-enable-vpc-flowlogs.md @@ -190 +190 @@ JSON - "Resource": "arn:{partition}:ec2:{region}:{account-id}:{instance|subnet|vpc|transit-gateway|transit-gateway-attachment}/{resource ID}" + "Resource": "arn:aws:{region}:{account-id}:{instance|subnet|vpc|transit-gateway|transit-gateway-attachment}/{resource ID}" @@ -210,2 +210,2 @@ JSON - "arn:{partition}:iam::{account-id}:role/{role name}", - "arn:{partition}:iam::{account-id}:role/AWSSupportCreateFlowLogsRole" + "arn:aws::111122223333:role/{role name}", + "arn:aws::111122223333:role/AWSSupportCreateFlowLogsRole" @@ -226,2 +226,2 @@ JSON - "arn:{partition}:logs:{region}:{account-id}:log-group:{log group name}", - "arn:{partition}:logs:{region}:{account-id}:log-group:{log group name}:*" + "arn:aws:us-east-1:{account-id}:log-group:{log group name}", + "arn:aws:us-east-1:{account-id}:log-group:{log group name}:*" @@ -243,2 +243,2 @@ JSON - "arn:{partition}:s3:::{bucket name}", - "arn:{partition}:s3:::{bucket name}/*" + "arn:aws:::{bucket name}", + "arn:aws:::{bucket name}/*"