AWS lake-formation documentation change

Service: lake-formation · 2025-08-16 · Documentation low

File: lake-formation/latest/dg/registration-role.md

Summary

Updated IAM role ARNs and CloudWatch Logs ARNs with specific account/region values

Security assessment

Standardizes example values for IAM resources. Helps prevent configuration errors but doesn't address specific security vulnerabilities or introduce new security content.

Diff

diff --git a/lake-formation/latest/dg/registration-role.md b/lake-formation/latest/dg/registration-role.md
index a1058ef14..2fc27d141 100644
--- a//lake-formation/latest/dg/registration-role.md
+++ b//lake-formation/latest/dg/registration-role.md
@@ -39,0 +40,6 @@ If you create the role using a different path, ensure that the role has a trust
+JSON
+    
+
+****
+    
+    
@@ -69,0 +77,6 @@ To include IAM Identity Center user context in the CloudTrail logs, the trust po
+JSON
+    
+
+****
+    
+    
@@ -92,0 +107,6 @@ The following is an inline policy that grants this permission. Replace `<account
+JSON
+    
+
+****
+    
+    
@@ -103 +123 @@ The following is an inline policy that grants this permission. Replace `<account
-                    "arn:aws:iam::<account-id>:role/<role-name>"
+                    "arn:aws:iam::111122223333:role/<role-name>"
@@ -114,0 +136,6 @@ Writing to CloudWatch Logs incurs a charge.
+JSON
+    
+
+****
+    
+    
@@ -127,2 +154,2 @@ Writing to CloudWatch Logs incurs a charge.
-                     "arn:aws:logs:<region>:<account-id>:log-group:/aws-lakeformation-acceleration/*",
-                     "arn:aws:logs:<region>:<account-id>:log-group:/aws-lakeformation-acceleration/*:log-stream:*"
+                     "arn:aws:logs:us-east-1:111122223333:log-group:/aws-lakeformation-acceleration/*",
+                     "arn:aws:logs:us-east-1:111122223333:log-group:/aws-lakeformation-acceleration/*:log-stream:*"