AWS managed-flink documentation change

Service: managed-flink · 2025-08-13 · Documentation low

File: managed-flink/latest/java/how-zeppelin-appendix-iam.md

Summary

Standardized AWS resource ARNs with concrete region/account values and added JSON formatting

Security assessment

Changes update example policies with specific account numbers and formatting but don't address security vulnerabilities. The modifications improve documentation clarity without changing security posture.

Diff

diff --git a/managed-flink/latest/java/how-zeppelin-appendix-iam.md b/managed-flink/latest/java/how-zeppelin-appendix-iam.md
index 5ee917a54..f699dbde0 100644
--- a//managed-flink/latest/java/how-zeppelin-appendix-iam.md
+++ b//managed-flink/latest/java/how-zeppelin-appendix-iam.md
@@ -33,0 +34,6 @@ The following example policy grants permissions to access a AWS Glue database.
+JSON
+    
+
+****
+    
+    
@@ -50,5 +56,5 @@ The following example policy grants permissions to access a AWS Glue database.
-                    "arn:aws:glue:<region>:<accountId>:connection/*",
-                    "arn:aws:glue:<region>:<accountId>:table/<database-name>/*",
-                    "arn:aws:glue:<region>:<accountId>:database/<database-name>",
-                    "arn:aws:glue:<region>:<accountId>:database/hive",
-                    "arn:aws:glue:<region>:<accountId>:catalog"
+                    "arn:aws:glue:us-east-1:123456789012:connection/*",
+                    "arn:aws:glue:us-east-1:123456789012:table/<database-name>/*",
+                    "arn:aws:glue:us-east-1:123456789012:database/<database-name>",
+                    "arn:aws:glue:us-east-1:123456789012:database/hive",
+                    "arn:aws:glue:us-east-1:123456789012:catalog"
@@ -111,0 +119,6 @@ The following policy grants permissions to read from a Kinesis Stream used as a
+JSON
+    
+
+****
+    
+    
@@ -133 +146 @@ The following policy grants permissions to read from a Kinesis Stream used as a
-          "Resource": "arn:aws:kinesis:<region>:<accountId>:stream/<stream-name>"
+                "Resource": "arn:aws:kinesis:us-east-1:123456789012:stream/<stream-name>"
@@ -142 +155 @@ The following policy grants permissions to read from a Kinesis Stream used as a
-          "Resource": "arn:aws:kinesis:<region>:<account>:stream/<stream-name>/consumer/*"
+                "Resource": "arn:aws:kinesis:us-east-1:123456789012:stream/<stream-name>/consumer/*"
@@ -148,0 +163,6 @@ The following policy grants permissions to write to a Kinesis Stream used as a d
+JSON
+    
+
+****
+    
+    
@@ -162 +182 @@ The following policy grants permissions to write to a Kinesis Stream used as a d
-                "Resource": "arn:aws:kinesis:<region>:<accountId>:stream/<stream-name>"
+                "Resource": "arn:aws:kinesis:us-east-1:123456789012:stream/<stream-name>"