AWS bedrock documentation change

Service: bedrock · 2025-08-01 · Documentation low

File: bedrock/latest/userguide/custom-model-job-access-security.md

Summary

Updated ARNs with specific account ID (123456789012) in security policies for model customization jobs

Security assessment

Improves example policies for job security but does not address specific vulnerabilities

Diff

diff --git a/bedrock/latest/userguide/custom-model-job-access-security.md b/bedrock/latest/userguide/custom-model-job-access-security.md
index b851b0a79..22e8f57a4 100644
--- a//bedrock/latest/userguide/custom-model-job-access-security.md
+++ b//bedrock/latest/userguide/custom-model-job-access-security.md
@@ -77 +77 @@ JSON
-                        "aws:SourceAccount": "account-id"
+                        "aws:SourceAccount": "123456789012"
@@ -156 +156 @@ JSON
-                    "arn:aws:bedrock:us-east-1:${AccountId}:inference-profile/${InferenceProfileId}",
+                    "arn:aws:bedrock:us-east-1:123456789012:inference-profile/${InferenceProfileId}",
@@ -221 +221 @@ JSON
-                    "arn:aws:ec2:${{region}}:${{account-id}}:network-interface/*"
+                    "arn:aws:ec2:us-east-1:123456789012:network-interface/*"
@@ -231 +231 @@ JSON
-                            "arn:aws:bedrock:us-east-1:${{account-id}}:model-customization-job/*"
+                            "arn:aws:bedrock:us-east-1:123456789012:model-customization-job/*"
@@ -242,3 +242,3 @@ JSON
-                    "arn:aws:ec2:us-east-1:${{account-id}}:subnet/${{subnet-id}}",
-                    "arn:aws:ec2:us-east-1:${{account-id}}:subnet/${{subnet-id2}}",
-                    "arn:aws:ec2:us-east-1:${{account-id}}:security-group/security-group-id"
+                    "arn:aws:ec2:us-east-1:123456789012:subnet/subnet-id",
+                    "arn:aws:ec2:us-east-1:123456789012:subnet/subnet-id2",
+                    "arn:aws:ec2:us-east-1:123456789012:security-group/security-group-id"
@@ -258,2 +258,2 @@ JSON
-                            "arn:aws:ec2:us-east-1:${{account-id}}:subnet/${{subnet-id}}",
-                            "arn:aws:ec2:us-east-1:${{account-id}}:subnet/${{subnet-id2}}"
+                            "arn:aws:ec2:us-east-1:123456789012:subnet/subnet-id",
+                            "arn:aws:ec2:us-east-1:123456789012:subnet/subnet-id2"
@@ -262 +262 @@ JSON
-                            "arn:aws:bedrock:us-east-1:${{account-id}}:model-customization-job/*"
+                            "arn:aws:bedrock:us-east-1:123456789012:model-customization-job/*"
@@ -275 +275 @@ JSON
-                "Resource": "arn:aws:ec2:${{region}}:${{account-id}}:network-interface/*",
+                "Resource": "arn:aws:ec2:us-east-1:123456789012:network-interface/*",