AWS neptune documentation change
Summary
Added Sid fields to IAM policy statements and replaced placeholder values with concrete ARNs
Security assessment
Improves policy documentation completeness by adding statement IDs and example ARNs, but does not indicate remediation of security vulnerabilities. Enhances security documentation quality without addressing specific threats.
Diff
diff --git a/neptune/latest/userguide/ml-manual-setup-notebooks.md b/neptune/latest/userguide/ml-manual-setup-notebooks.md index 35c2eee6d..8b15430ca 100644 --- a//neptune/latest/userguide/ml-manual-setup-notebooks.md +++ b//neptune/latest/userguide/ml-manual-setup-notebooks.md @@ -49 +49,2 @@ JSON - "Resource": "arn:aws:cloudwatch:[AWS_REGION]:[AWS_ACCOUNT_ID]:*", + "Resource": "arn:aws:cloudwatch:us-east-1:111122223333:*", + "Sid": "AllowPutMetrics", @@ -60 +61,2 @@ JSON - "Resource": "arn:aws:logs:[AWS_REGION]:[AWS_ACCOUNT_ID]:*", + "Resource": "arn:aws:logs:us-east-1:111122223333:*", + "Sid": "AllowCreateLogs", @@ -69,0 +72 @@ JSON + "Sid": "AllowS3Actions", @@ -74 +77,2 @@ JSON - "Resource": "arn:aws:execute-api:[AWS_REGION]:[AWS_ACCOUNT_ID]:*/*", + "Resource": "arn:aws:execute-api:us-east-1:111122223333:*/*", + "Sid": "AllowExecute", @@ -89 +93,2 @@ JSON - "Resource": "arn:aws:sagemaker:[AWS_REGION]:[AWS_ACCOUNT_ID]:*/*", + "Resource": "arn:aws:sagemaker:us-east-1:111122223333:*/*", + "Sid": "AllowApiActions", @@ -96 +101,2 @@ JSON - "Resource": "[YOUR_NEPTUNE_ML_IAM_ROLE_ARN]"", + "Resource": "aws:arn:iam::111122223333:role/[roleName]", + "Sid": "AllowPassRole",