AWS bedrock documentation change

Service: bedrock · 2025-08-01 · Documentation low

File: bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md

Summary

Updated ARN formats to use specific account ID 123456789012 and service prefixes

Security assessment

Corrects ARN syntax for documentation accuracy but does not address security issues.

Diff

diff --git a/bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md b/bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md
index 689dfdccd..d8d894bca 100644
--- a//bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md
+++ b//bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md
@@ -26 +26 @@ JSON
-                    "AWS": "arn:aws:iam::<accountId>:root"
+                    "AWS": "arn:aws:iam::123456789012:root"
@@ -29 +29 @@ JSON
-                "Resource": "arn:aws:<region>:<accountId>:domain/<domainName>"
+                "Resource": "arn:aws:bedrock:us-east-1:123456789012:domain/<domainName>"
@@ -99 +99 @@ JSON
-                    "arn:aws:<region>:<accountId>:domain/<domainName>/<indexName>/*"
+                    "arn:aws:es:us-east-1:123456789012:domain/domainName/indexName/*"
@@ -110 +110 @@ JSON
-                    "arn:aws:<region>:<accountId>:domain/<domainName>/<indexName>"
+                "arn:aws:es:us-east-1:123456789012:domain/domainName/indexName"
@@ -120 +120 @@ JSON
-                    "arn:aws:<region>:<accountId>:domain/<domainName>"
+                "arn:aws:es:us-east-1:123456789012:domain/domainName"
@@ -145 +145 @@ JSON
-                        "arn:aws::<accountId>:role/service-role/<KnowledgeBaseServiceRoleName>"
+                        "arn:aws:es:123456789012:role/service-role/KnowledgeBaseServiceRoleName"
@@ -155 +155 @@ JSON
-                    "arn:aws:<region>:<accountId>:domain/<domainName>/<indexName>/*"
+                    "arn:aws:es:us-east-1:123456789012:domain/domainName/indexName/*"
@@ -162 +162 @@ JSON
-                        "arn:aws::<accountId>:(role|service-role)/<KnowledgeBaseServiceRoleName>"
+                        "arn:aws:es:123456789012:(role|service-role)/KnowledgeBaseServiceRoleName"
@@ -167 +167 @@ JSON
-                    "arn:aws:<region>:<accountId>:domain/<domainName>/<indexName>"
+                    "arn:aws:es:us-east-1:123456789012:domain/domainName/indexName"
@@ -174 +174 @@ JSON
-                        "arn:aws::<accountId>:(role|service-role)/<KnowledgeBaseServiceRoleName>"
+                        "arn:aws:es:123456789012:(role|service-role)/KnowledgeBaseServiceRoleName"
@@ -179 +179 @@ JSON
-                    "arn:aws:<region>:<accountId>:domain/<domainName>"
+                    "arn:aws:es:us-east-1:123456789012:domain/domainName"