AWS guardduty documentation change
Summary
Updated example JSON policy with concrete resource ARNs and KMS key ID instead of placeholders
Security assessment
The changes replace generic placeholders with specific example values (bucket ARN, region, KMS key ARN) in policy examples. While this improves documentation clarity, there's no evidence of addressing a security vulnerability or adding new security features - just making existing security configuration examples more concrete.
Diff
diff --git a/guardduty/latest/ug/guardduty_settingup.md b/guardduty/latest/ug/guardduty_settingup.md index 8a72a261c..0e96babf9 100644 --- a//guardduty/latest/ug/guardduty_settingup.md +++ b//guardduty/latest/ug/guardduty_settingup.md @@ -251 +251 @@ JSON - "Resource": "Amazon S3 bucket ARN", + "Resource": "arn:aws:s3:::amzn-s3-demo-bucket", @@ -255 +255 @@ JSON - "aws:SourceArn": "arn:aws:guardduty:Region2:123456789012:detector/SourceDetectorID" + "aws:SourceArn": "arn:aws:guardduty:us-east-2:123456789012:detector/SourceDetectorID" @@ -267 +267 @@ JSON - "Resource": "Amazon S3 bucket ARN/[optional prefix]/*", + "Resource": "arn:aws:s3:::amzn-s3-demo-bucket[optional prefix]/*", @@ -271 +271 @@ JSON - "aws:SourceArn": "arn:aws:guardduty:Region2:123456789012:detector/SourceDetectorID" + "aws:SourceArn": "arn:aws:guardduty:us-east-2:123456789012:detector/SourceDetectorID" @@ -283 +283 @@ JSON - "Resource": "Amazon S3 bucket ARN/[optional prefix]/*", + "Resource": "arn:aws:s3:::amzn-s3-demo-bucket[optional prefix]/*", @@ -297 +297 @@ JSON - "Resource": "Amazon S3 bucket ARN/[optional prefix]/*", + "Resource": "arn:aws:s3:::amzn-s3-demo-bucket[optional prefix]/*", @@ -300 +300 @@ JSON - "s3:x-amz-server-side-encryption-aws-kms-key-id": "KMS key ARN" + "s3:x-amz-server-side-encryption-aws-kms-key-id": "arn:aws:kms:us-east-2:111122223333:key/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111" @@ -309 +309 @@ JSON - "Resource": "Amazon S3 bucket ARN/[optional prefix]/*", + "Resource": "arn:aws:s3:::amzn-s3-demo-bucket[optional prefix]/*",