AWS bedrock documentation change
Summary
Fixed ARN formatting and standardized account IDs (123456789012) in cross-account access policies
Security assessment
Corrects policy syntax examples for cross-account access but does not resolve active security issues
Diff
diff --git a/bedrock/latest/userguide/cross-account-access-cmi.md b/bedrock/latest/userguide/cross-account-access-cmi.md index 383d36129..cead3c0bf 100644 --- a//bedrock/latest/userguide/cross-account-access-cmi.md +++ b//bedrock/latest/userguide/cross-account-access-cmi.md @@ -32 +32 @@ JSON - "AWS": "arn:aws:iam::123456789123:role/ImportRole" + "AWS": "arn:aws::iam::123456789012:role/ImportRole" @@ -39,2 +39,2 @@ JSON - "arn:aws:s3://amzn-s3-demo-bucket", - "arn:aws:s3://amzn-s3-demo-bucket/*" + "arn:aws::s3:::amzn-s3-demo-bucket", + "arn:aws::s3:::amzn-s3-demo-bucket/*" @@ -68,2 +67,2 @@ JSON - "arn:aws:s3://amzn-s3-demo-bucket", - "arn:aws:s3://amzn-s3-demo-bucket/*" + "arn:aws:s3:::amzn-s3-demo-bucket", + "arn:aws:s3:::amzn-s3-demo-bucket/*" @@ -73 +72 @@ JSON - "aws:ResourceAccount": "111222333444555" + "aws:ResourceAccount": "123456789012" @@ -108 +106 @@ JSON - "AWS": "arn:aws:iam::123456789123:role/ImportRole" + "AWS": "arn:aws:iam::123456789012:role/ImportRole" @@ -115,2 +113,2 @@ JSON - "arn:aws:s3://amzn-s3-demo-bucket", - "arn:aws:s3://amzn-s3-demo-bucket/*" + "arn:aws:s3:::amzn-s3-demo-bucket", + "arn:aws:s3:::amzn-s3-demo-bucket/*" @@ -160,2 +157,2 @@ JSON - "arn:aws:s3://amzn-s3-demo-bucket", - "arn:aws:s3://amzn-s3-demo-bucket/*" + "arn:aws:s3:::amzn-s3-demo-bucket", + "arn:aws:s3:::amzn-s3-demo-bucket/*" @@ -165 +162 @@ JSON - "aws:ResourceAccount": "111222333444555" + "aws:ResourceAccount": "123456789012" @@ -175 +172 @@ JSON - "Resource": "arn:aws:kms:us-west-2:123456789098:key/111aa2bb-333c-4d44-5555-a111bb2c33dd" + "Resource": "arn:aws:kms:us-west-2:123456789012:key/111aa2bb-333c-4d44-5555-a111bb2c33dd"