AWS bedrock documentation change

Service: bedrock · 2025-08-01 · Documentation low

File: bedrock/latest/userguide/encryption-flows.md

Summary

Updated KMS ARNs and simplified policy statement IDs for flow encryption

Security assessment

Documents flow encryption configuration without evidence of vulnerability remediation

Diff

diff --git a/bedrock/latest/userguide/encryption-flows.md b/bedrock/latest/userguide/encryption-flows.md
index 9d9241aa2..48d5b4239 100644
--- a//bedrock/latest/userguide/encryption-flows.md
+++ b//bedrock/latest/userguide/encryption-flows.md
@@ -25 +25 @@ JSON
-                "Sid": "Allow Amazon Bedrock Flows to encrypt and decrypt data",
+                "Sid": "EncryptFlow",
@@ -31 +31 @@ JSON
-                "Resource": "arn:aws:kms:us-east-1:${account-id}:key/${key-id}",
+                "Resource": "arn:aws:kms:us-east-1:123456789012:key/${key-id}",
@@ -34 +34 @@ JSON
-                        "kms:EncryptionContext:aws:bedrock-flows:arn": "arn:aws:bedrock:${region}:${account-id}:flow/${flow-id}",
+                        "kms:EncryptionContext:aws:bedrock-flows:arn": "arn:aws:bedrock:us-east-1:123456789012:flow/${flow-id}",
@@ -58 +58 @@ JSON
-                    "AWS": "arn:aws:iam::${account-id}:root"
+                    "AWS": "arn:aws:iam::123456789012:root"
@@ -61 +61 @@ JSON
-                "Resource": "arn:aws:kms:${region}:${account-id}:key/${key-id}"
+                "Resource": "arn:aws:kms:us-east-1:123456789012:key/${key-id}"
@@ -73 +73 @@ JSON
-                "Resource": "arn:aws:kms:${region}:${account-id}:key/${key-id}",
+                "Resource": "arn:aws:kms:us-east-1:123456789012:key/${key-id}",
@@ -76 +76 @@ JSON
-                        "kms:EncryptionContext:aws:bedrock-flows:arn": "arn:aws:bedrock:${region}:${account-id}:flow/${flow-id}",
+                        "kms:EncryptionContext:aws:bedrock-flows:arn": "arn:aws:bedrock:us-east-1:123456789012:flow/${flow-id}",
@@ -97 +97 @@ JSON
-                "Sid": "Allow data encryption and decryption with flow executions in Amazon Bedrock.",
+                "Sid": "EncryptionFlows",
@@ -103 +103 @@ JSON
-                "Resource": "arn:aws:kms:us-east-1:account-id:key/key-id",
+                "Resource": "arn:aws:kms:us-east-1:123456789012:key/key-id",
@@ -106 +106 @@ JSON
-                        "kms:EncryptionContext:aws:bedrock-flows:arn": "arn:aws:bedrock:region:account-id:flow/flow-id",
+                        "kms:EncryptionContext:aws:bedrock-flows:arn": "arn:aws:bedrock:us-east-1:123456789012:flow/flow-id",