AWS odb documentation change
Summary
Updated secret examples, IAM policy syntax, and resource ARN specificity
Security assessment
Changes include improved IAM policy examples demonstrating secure resource restrictions and secret management patterns, but do not address specific vulnerabilities. The password example update ('Reinvent_2025') appears to be a placeholder change rather than a security fix.
Diff
diff --git a/odb/latest/UserGuide/zero-etl-prerequisites.md b/odb/latest/UserGuide/zero-etl-prerequisites.md index 0ba477471..e2ac0c17b 100644 --- a//odb/latest/UserGuide/zero-etl-prerequisites.md +++ b//odb/latest/UserGuide/zero-etl-prerequisites.md @@ -202,3 +202,3 @@ The following example shows a secret for Oracle Exadata. For `asm_service_name`, - "asm_service_name": "111.11.11.11:2484/+ASM", - "asm_user": "ODBZEROETLASM", - "asm_password": "asm_password" + "asm_user": "odbzeroetlasm", + "asm_password": "Reinvent_2025", + "asm_service_name": "111.11.11.11:2484/+ASM" @@ -226,0 +227,6 @@ Create IAM policies that allow Zero-ETL integration operations. The following ex +JSON + + +**** + + @@ -237,2 +243,2 @@ Create IAM policies that allow Zero-ETL integration operations. The following ex - "arn:aws:odb:region:account:cloud-vm-cluster/cluster-id", - "arn:aws:glue:region:account:integration:*" + "arn:aws:odb:us-east-1:account:cloud-vm-cluster/cluster-id", + "arn:aws:glue:us-east-1:account:integration:*" @@ -247 +253 @@ Create IAM policies that allow Zero-ETL integration operations. The following ex - "arn:aws:odb:region:account:cloud-vm-cluster/cluster-id" + "arn:aws:odb:us-east-1:account:cloud-vm-cluster/cluster-id" @@ -255 +261,3 @@ Create IAM policies that allow Zero-ETL integration operations. The following ex - "Resource": ["*"] + "Resource": [ + "*" + ] @@ -264 +272 @@ Create IAM policies that allow Zero-ETL integration operations. The following ex - "arn:aws:glue:region:account:integration:*" + "arn:aws:glue:us-east-1:account:integration:*"