AWS Security ChangesHomeSearch

AWS AmazonRDS documentation change

Service: AmazonRDS · 2025-08-10 · Documentation low

File: AmazonRDS/latest/AuroraUserGuide/zero-etl.setting-up.md

Summary

Added JSON formatting blocks, standardized account IDs to 111122223333, and updated resource ARNs in IAM policies

Security assessment

Changes provide consistent examples for Lake Formation permissions but show no evidence of addressing security vulnerabilities. Updates to trust relationships and role ARNs are documentation improvements rather than security fixes.

Diff

diff --git a/AmazonRDS/latest/AuroraUserGuide/zero-etl.setting-up.md b/AmazonRDS/latest/AuroraUserGuide/zero-etl.setting-up.md
index 2fd6113dc..887022258 100644
--- a//AmazonRDS/latest/AuroraUserGuide/zero-etl.setting-up.md
+++ b//AmazonRDS/latest/AuroraUserGuide/zero-etl.setting-up.md
@@ -571,0 +572,6 @@ The target creation role must be a Lake Formation administrator and requires the
+JSON
+    
+
+****
+    
+    
@@ -600,2 +606,2 @@ The target creation role must be a Lake Formation administrator and requires the
-                    "arn:aws:glue:*:account-id:catalog",
-                    "arn:aws:glue:*:account-id:catalog/*",
+                    "arn:aws:glue:*:111122223333:catalog",
+                    "arn:aws:glue:*:111122223333:catalog/*",
@@ -603,3 +609,3 @@ The target creation role must be a Lake Formation administrator and requires the
-                    "arn:aws:redshift-serverless:*:account-id:workgroup/*",
-                    "arn:aws:redshift-serverless:*:account-id:namespace/*",
-                    "arn:aws:iam::account-id:role/GlueDataCatalogDataTransferRole"
+                    "arn:aws:redshift-serverless:*:111122223333:workgroup/*",
+                    "arn:aws:redshift-serverless:*:111122223333:namespace/*",
+                    "arn:aws:iam::111122223333:role/GlueDataCatalogDataTransferRole"
@@ -612,0 +620,6 @@ The target creation role must have the following trust relationship.
+JSON
+    
+
+****
+    
+    
@@ -627 +640 @@ The target creation role must have the following trust relationship.
-                "AWS": "arn:aws:iam::account-id:user/Username"
+                "AWS": "arn:aws:iam::111122223333:user/Username"
@@ -635,0 +650,6 @@ The Glue data transfer role is required for MySQL catalog operations and must ha
+JSON
+    
+
+****
+    
+    
@@ -657,0 +679,6 @@ The Glue data transfer role must have the following trust relationship.
+JSON
+    
+
+****
+    
+