AWS bedrock documentation change
Summary
Replaced placeholders with 123456789012 in resource ARNs and conditions
Security assessment
Standardizes examples without altering security policies or introducing new security content.
Diff
diff --git a/bedrock/latest/userguide/kb-permissions.md b/bedrock/latest/userguide/kb-permissions.md index 8f384f152..3b3f9e3a9 100644 --- a//bedrock/latest/userguide/kb-permissions.md +++ b//bedrock/latest/userguide/kb-permissions.md @@ -99 +99 @@ JSON - "aws:SourceAccount": "${AccountId}" + "aws:SourceAccount": "123456789012" @@ -102 +102 @@ JSON - "AWS:SourceArn": "arn:aws:bedrock:us-east-1:${AccountId}:knowledge-base/*" + "AWS:SourceArn": "arn:aws:bedrock:us-east-1:123456789012:knowledge-base/*" @@ -191 +191 @@ JSON - "aws:ResourceAccount": [${AccountId}] + "aws:ResourceAccount": [123456789012] @@ -206 +206 @@ JSON - "aws:ResourceAccount": [${AccountId}] + "aws:ResourceAccount": [123456789012] @@ -245 +245 @@ JSON - "arn:aws:secretsmanager:${Region}:${AccountId}:secret:${secret-id}" + "arn:aws:secretsmanager:us-east-1:123456789012:secret:${secret-id}" @@ -254 +254 @@ JSON - "arn:aws:kms:${Region}:${AccountId}:key/${KeyId}" + "arn:aws:kms:us-east-1:123456789012:key/${KeyId}" @@ -259 +259 @@ JSON - "secretsmanager.${Region}.amazonaws.com" + "secretsmanager.us-east-1.amazonaws.com" @@ -291 +291 @@ JSON - "arn:aws:secretsmanager:${Region}:${AccountId}:secret:${SecretId}" + "arn:aws:secretsmanager:us-east-1:123456789012:secret:${SecretId}" @@ -300 +300 @@ JSON - "arn:aws:kms:${Region}:${AccountId}:key/${KeyId}" + "arn:aws:kms:us-east-1:123456789012:key/${KeyId}" @@ -305 +305 @@ JSON - "secretsmanager.${Region}.amazonaws.com" + "secretsmanager.us-east-1.amazonaws.com" @@ -337 +337 @@ JSON - "arn:aws:secretsmanager:${Region}:${AccountId}:secret:${SecretId}" + "arn:aws:secretsmanager:us-east-1:123456789012:secret:${SecretId}" @@ -346 +346 @@ JSON - "arn:aws:kms:${Region}:${AccountId}:key/${KeyId}" + "arn:aws:kms:us-east-1:123456789012:key/${KeyId}" @@ -351 +351 @@ JSON - "secretsmanager.${Region}.amazonaws.com" + "secretsmanager.us-east-1.amazonaws.com" @@ -465 +465 @@ JSON - "Resource": "arn:${${Partition}}:kendra:${${Region}}:${${AccountId}}:index/${${IndexId}}" + "Resource": "arn:${${Partition}}:kendra:${us-east-1}:${123456789012}:index/${${IndexId}}" @@ -491 +491 @@ JSON - "arn:aws:aoss:us-east-1:${AccountId}:collection/${CollectionId}" + "arn:aws:aoss:us-east-1:123456789012:collection/${CollectionId}" @@ -520 +520 @@ JSON - "arn:<partition>:es:<region>:<accountId>:domain/<domainName>/<indexName>" + "arn:<partition>:es:<region>:<123456789012>:domain/<domainName>/<indexName>" @@ -530 +530 @@ JSON - "arn:<partition>:es:<region>:<accountId>:domain/<domainName>" + "arn:<partition>:es:<region>:<123456789012>:domain/<domainName>" @@ -561 +561 @@ JSON - "arn:aws:rds:us-east-1:${AccountId}:cluster:${DbClusterId}" + "arn:aws:rds:us-east-1:123456789012:cluster:${DbClusterId}" @@ -572 +572 @@ JSON - "arn:aws:rds:us-east-1:${AccountId}:cluster:${DbClusterId}" + "arn:aws:rds:us-east-1:123456789012:cluster:${DbClusterId}" @@ -603 +603 @@ JSON - "arn:aws:neptune-graph:us-east-1:${AccountId}:graph/${GraphId}" + "arn:aws:neptune-graph:us-east-1:123456789012:graph/${GraphId}" @@ -640 +640 @@ JSON - "Resource": "arn:aws:s3vectors:us-east-1:${AccountId}:bucket/${BucketName}/index/${IndexName}" + "Resource": "arn:aws:s3vectors:us-east-1:123456789012:bucket/${BucketName}/index/${IndexName}" @@ -666 +666 @@ JSON - "arn:aws:secretsmanager:us-east-1:${AccountId}:secret:${SecretId}" + "arn:aws:secretsmanager:us-east-1:123456789012:secret:${SecretId}" @@ -696 +696 @@ JSON - "arn:aws:kms:us-east-1:${AccountId}:key/${KeyId}" + "arn:aws:kms:us-east-1:123456789012:key/${KeyId}" @@ -792 +792 @@ JSON - "AWS": "${KbRoleArn}" + "AWS": "123456789012"