AWS managed-flink documentation change
Summary
Updated resource ARNs in IAM policy examples with specific bucket names and account IDs
Security assessment
Changes standardize example policies with concrete values but don't introduce new security features or address vulnerabilities. Maintains existing security documentation quality.
Diff
diff --git a/managed-flink/latest/java/security_iam_service-with-iam.md b/managed-flink/latest/java/security_iam_service-with-iam.md index 80f03291e..1a3e084c0 100644 --- a//managed-flink/latest/java/security_iam_service-with-iam.md +++ b//managed-flink/latest/java/security_iam_service-with-iam.md @@ -65,0 +66,6 @@ If you create the IAM role manually or if you create and manage the application +JSON + + +**** + + @@ -78 +84 @@ If you create the IAM role manually or if you create and manage the application - "arn:aws:s3:::bucket-name/path-to-application-code" + "arn:aws:s3:::amzn-s3-demo-bucket/path-to-application-code" @@ -88 +94 @@ If you create the IAM role manually or if you create and manage the application - "arn:aws:logs:region:account-id:log-group:*" + "arn:aws:logs:us-east-1:123456789012:log-group:*" @@ -98 +104 @@ If you create the IAM role manually or if you create and manage the application - "arn:aws:logs:region:account-id:log-group:/aws/kinesis-analytics/application-name:log-stream:*" + "arn:aws:logs:us-east-1:123456789012:log-group:/aws/kinesis-analytics/application-name:log-stream:*" @@ -108 +114 @@ If you create the IAM role manually or if you create and manage the application - "arn:aws:logs:region:account-id:log-group:/aws/kinesis-analytics/application-name:log-stream:kinesis-analytics-log-stream" + "arn:aws:logs:us-east-1:123456789012:log-group:/aws/kinesis-analytics/application-name:log-stream:kinesis-analytics-log-stream"