AWS athena documentation change

Service: athena · 2025-08-16 · Documentation low

File: athena/latest/ug/workgroups-identity-center.md

Summary

Updated example policy placeholders with concrete values (account ID 111122223333 and us-east-1 region)

Security assessment

The change provides more precise policy examples by replacing variables with actual values, reducing risk of misconfiguration. While this improves security documentation clarity, there is no evidence it addresses a specific security vulnerability.

Diff

diff --git a/athena/latest/ug/workgroups-identity-center.md b/athena/latest/ug/workgroups-identity-center.md
index 92c09532c..5d0be0b4c 100644
--- a//athena/latest/ug/workgroups-identity-center.md
+++ b//athena/latest/ug/workgroups-identity-center.md
@@ -243 +243 @@ JSON
-                        "s3:AccessGrantsInstanceArn": "arn:aws:s3:${region}:${account}:access-grants/default"
+                        "s3:AccessGrantsInstanceArn": "arn:aws:s3:us-east-1:111122223333:access-grants/default"
@@ -246 +246 @@ JSON
-                        "aws:ResourceAccount": "${account}"
+                        "aws:ResourceAccount": "111122223333"
@@ -258 +258 @@ JSON
-                "NotResource": "arn:aws:kms:us-east-1:${account}:key/${keyid}",
+                "NotResource": "arn:aws:kms:us-east-1:111122223333:key/${keyid}",
@@ -268 +268 @@ JSON
-                        "s3:AccessGrantsInstanceArn": "arn:aws:s3:${region}:${account}:access-grants/default"
+                        "s3:AccessGrantsInstanceArn": "arn:aws:s3:us-east-1:111122223333:access-grants/default"
@@ -271 +271 @@ JSON
-                        "aws:ResourceAccount": "${account}"
+                        "aws:ResourceAccount": "111122223333"
@@ -285 +285 @@ JSON
-                        "s3:AccessGrantsInstanceArn": "arn:aws:s3:${region}:${account}:access-grants/default"
+                        "s3:AccessGrantsInstanceArn": "arn:aws:s3:us-east-1:111122223333:access-grants/default"
@@ -288 +288 @@ JSON
-                        "aws:ResourceAccount": "${account}"
+                    "aws:ResourceAccount": "111122223333"
@@ -299 +299 @@ JSON
-                        "s3:AccessGrantsInstanceArn": "arn:aws:s3:${region}:${account}:access-grants/default"
+                        "s3:AccessGrantsInstanceArn": "arn:aws:s3:us-east-1:111122223333:access-grants/default"
@@ -302 +302 @@ JSON
-                        "aws:ResourceAccount": "${account}"
+                        "aws:ResourceAccount": "111122223333"
@@ -321 +321 @@ JSON
-                "Resource": "arn:aws:kms:us-east-1:${account}:key/${keyid}",
+                "Resource": "arn:aws:kms:us-east-1:111122223333:key/${keyid}",