AWS AmazonRDS documentation change
Summary
Added JSON formatting blocks, standardized account IDs to 111122223333, and updated resource ARNs in IAM policies
Security assessment
Changes provide consistent examples for Lake Formation permissions but show no evidence of addressing security vulnerabilities. Updates to trust relationships and role ARNs are documentation improvements rather than security fixes.
Diff
diff --git a/AmazonRDS/latest/AuroraUserGuide/zero-etl.setting-up.md b/AmazonRDS/latest/AuroraUserGuide/zero-etl.setting-up.md index 2fd6113dc..887022258 100644 --- a//AmazonRDS/latest/AuroraUserGuide/zero-etl.setting-up.md +++ b//AmazonRDS/latest/AuroraUserGuide/zero-etl.setting-up.md @@ -571,0 +572,6 @@ The target creation role must be a Lake Formation administrator and requires the +JSON + + +**** + + @@ -600,2 +606,2 @@ The target creation role must be a Lake Formation administrator and requires the - "arn:aws:glue:*:account-id:catalog", - "arn:aws:glue:*:account-id:catalog/*", + "arn:aws:glue:*:111122223333:catalog", + "arn:aws:glue:*:111122223333:catalog/*", @@ -603,3 +609,3 @@ The target creation role must be a Lake Formation administrator and requires the - "arn:aws:redshift-serverless:*:account-id:workgroup/*", - "arn:aws:redshift-serverless:*:account-id:namespace/*", - "arn:aws:iam::account-id:role/GlueDataCatalogDataTransferRole" + "arn:aws:redshift-serverless:*:111122223333:workgroup/*", + "arn:aws:redshift-serverless:*:111122223333:namespace/*", + "arn:aws:iam::111122223333:role/GlueDataCatalogDataTransferRole" @@ -612,0 +620,6 @@ The target creation role must have the following trust relationship. +JSON + + +**** + + @@ -627 +640 @@ The target creation role must have the following trust relationship. - "AWS": "arn:aws:iam::account-id:user/Username" + "AWS": "arn:aws:iam::111122223333:user/Username" @@ -635,0 +650,6 @@ The Glue data transfer role is required for MySQL catalog operations and must ha +JSON + + +**** + + @@ -657,0 +679,6 @@ The Glue data transfer role must have the following trust relationship. +JSON + + +**** + +