AWS parallelcluster documentation change
Summary
Updated AWS account IDs and regions in IAM policy examples from placeholder values to concrete examples (111122223333 account ID and us-east-1 region)
Security assessment
Changes replace placeholder values with example concrete values for documentation clarity. No security vulnerability is being addressed - this is routine documentation maintenance to standardize examples.
Diff
diff --git a/parallelcluster/latest/ug/iam-roles-in-parallelcluster-v3.md b/parallelcluster/latest/ug/iam-roles-in-parallelcluster-v3.md index ae045a183..12f400ef0 100644 --- a//parallelcluster/latest/ug/iam-roles-in-parallelcluster-v3.md +++ b//parallelcluster/latest/ug/iam-roles-in-parallelcluster-v3.md @@ -151 +151 @@ JSON - "Resource": "arn:aws:dynamodb:*:<AWS ACCOUNT ID>:table/parallelcluster-*", + "Resource": "arn:aws:dynamodb:*:111122223333:table/parallelcluster-*", @@ -202,2 +202,2 @@ JSON - "arn:aws:iam::<AWS ACCOUNT ID>:role/*", - "arn:aws:iam::<AWS ACCOUNT ID>:policy/*", + "arn:aws:iam::111122223333:role/*", + "arn:aws:iam::111122223333:policy/*", @@ -205 +205 @@ JSON - "arn:aws:iam::<AWS ACCOUNT ID>:instance-profile/*" + "arn:aws:iam::111122223333:instance-profile/*" @@ -218 +218 @@ JSON - "arn:aws:iam::<AWS ACCOUNT ID>:instance-profile/parallelcluster/*" + "arn:aws:iam::111122223333:instance-profile/parallelcluster/*" @@ -237 +237 @@ JSON - "arn:aws:iam::<AWS ACCOUNT ID>:role/parallelcluster/*" + "arn:aws:iam::111122223333:role/parallelcluster/*" @@ -257,2 +257,2 @@ JSON - "arn:aws:lambda:*:<AWS ACCOUNT ID>:function:parallelcluster-*", - "arn:aws:lambda:*:<AWS ACCOUNT ID>:function:pcluster-*" + "arn:aws:lambda:*:111122223333:function:parallelcluster-*", + "arn:aws:lambda:*:111122223333:function:pcluster-*" @@ -288 +288 @@ JSON - "arn:aws:elasticfilesystem:*:<AWS ACCOUNT ID>:*" + "arn:aws:elasticfilesystem:*:111122223333:*" @@ -332 +332 @@ JSON - "Resource": "arn:aws:secretsmanager:<REGION>:<AWS ACCOUNT ID>:secret:<SECRET NAME>", + "Resource": "arn:aws:secretsmanager:us-east-1:111122223333:secret:<SECRET NAME>", @@ -367 +367 @@ JSON - "arn:aws:iam::<AWS ACCOUNT ID>:role/parallelcluster/*" + "arn:aws:iam::111122223333:role/parallelcluster/*" @@ -385 +385 @@ JSON - "arn:aws:iam::<AWS ACCOUNT ID>:role/aws-service-role/batch.amazonaws.com/*" + "arn:aws:iam::111122223333:role/aws-service-role/batch.amazonaws.com/*" @@ -393 +393 @@ JSON - "Resource": "arn:aws:codebuild:*:<AWS ACCOUNT ID>:project/pcluster-*", + "Resource": "arn:aws:codebuild:*:111122223333:project/pcluster-*", @@ -472 +472 @@ JSON - "arn:aws:fsx:*:<AWS ACCOUNT ID>:*" + "arn:aws:fsx:*:111122223333:*" @@ -483 +483 @@ JSON - "Resource": "arn:aws:iam::<AWS ACCOUNT ID>:role/aws-service-role/s3.data-source.lustre.fsx.amazonaws.com/*", + "Resource": "arn:aws:iam::111122223333:role/aws-service-role/s3.data-source.lustre.fsx.amazonaws.com/*", @@ -492 +492 @@ JSON - "Resource": "arn:aws:s3:::<S3 NAME>", + "Resource": "arn:aws:s3:::amzn-s3-demo-bucket", @@ -536,3 +536,3 @@ JSON - "arn:aws:iam::<AWS ACCOUNT ID>:instance-profile/parallelcluster/*", - "arn:aws:iam::<AWS ACCOUNT ID>:instance-profile/ParallelClusterImage*", - "arn:aws:iam::<AWS ACCOUNT ID>:role/parallelcluster/*" + "arn:aws:iam::111122223333:instance-profile/parallelcluster/*", + "arn:aws:iam::111122223333:instance-profile/ParallelClusterImage*", + "arn:aws:iam::111122223333:role/parallelcluster/*" @@ -556,2 +556,2 @@ JSON - "arn:aws:iam::<AWS ACCOUNT ID>:instance-profile/parallelcluster/*", - "arn:aws:iam::<AWS ACCOUNT ID>:role/parallelcluster/*" + "arn:aws:iam::111122223333:instance-profile/parallelcluster/*", + "arn:aws:iam::111122223333:role/parallelcluster/*" @@ -571,2 +571,2 @@ JSON - "arn:aws:logs:*:<AWS ACCOUNT ID>:log-group:/aws/imagebuilder/ParallelClusterImage-*", - "arn:aws:logs:*:<AWS ACCOUNT ID>:log-group:/aws/lambda/ParallelClusterImage-*" + "arn:aws:logs:*:111122223333:log-group:/aws/imagebuilder/ParallelClusterImage-*", + "arn:aws:logs:*:111122223333:log-group:/aws/lambda/ParallelClusterImage-*" @@ -584 +584 @@ JSON - "arn:aws:cloudformation:*:<AWS ACCOUNT ID>:stack/*" + "arn:aws:cloudformation:*:111122223333:stack/*" @@ -601 +601 @@ JSON - "arn:aws:lambda:*:<AWS ACCOUNT ID>:function:ParallelClusterImage-*" + "arn:aws:lambda:*:111122223333:function:ParallelClusterImage-*" @@ -629,5 +629,5 @@ JSON - "arn:aws:imagebuilder:*:<AWS ACCOUNT ID>:image/parallelclusterimage-*", - "arn:aws:imagebuilder:*:<AWS ACCOUNT ID>:image-recipe/parallelclusterimage-*", - "arn:aws:imagebuilder:*:<AWS ACCOUNT ID>:component/parallelclusterimage-*", - "arn:aws:imagebuilder:*:<AWS ACCOUNT ID>:distribution-configuration/parallelclusterimage-*", - "arn:aws:imagebuilder:*:<AWS ACCOUNT ID>:infrastructure-configuration/parallelclusterimage-*" + "arn:aws:imagebuilder:*:111122223333:image/parallelclusterimage-*", + "arn:aws:imagebuilder:*:111122223333:image-recipe/parallelclusterimage-*", + "arn:aws:imagebuilder:*:111122223333:component/parallelclusterimage-*", + "arn:aws:imagebuilder:*:111122223333:distribution-configuration/parallelclusterimage-*", + "arn:aws:imagebuilder:*:111122223333:infrastructure-configuration/parallelclusterimage-*" @@ -661 +661 @@ JSON - "arn:aws:sns:*:<AWS ACCOUNT ID>:ParallelClusterImage-*" + "arn:aws:sns:*:111122223333:ParallelClusterImage-*" @@ -742 +742 @@ JSON - "arn:aws:iam::<AWS ACCOUNT ID>:role/parallelcluster/*" + "arn:aws:iam::111122223333:role/parallelcluster/*" @@ -752 +752 @@ JSON - "arn:aws:iam::<AWS ACCOUNT ID>:role/parallelcluster/*" + "arn:aws:iam::111122223333:role/parallelcluster/*" @@ -762 +762 @@ JSON - "Resource": "arn:aws:iam::<AWS ACCOUNT ID>:role/parallelcluster/*", + "Resource": "arn:aws:iam::111122223333:role/parallelcluster/*", @@ -770,2 +770,2 @@ JSON - "arn:aws:iam::<AWS ACCOUNT ID>:policy/parallelcluster*", - "arn:aws:iam::<AWS ACCOUNT ID>:policy/parallelcluster/*", + "arn:aws:iam::111122223333:policy/parallelcluster*", + "arn:aws:iam::111122223333:policy/parallelcluster/*", @@ -789 +789 @@ JSON - "Resource": "arn:aws:iam::<AWS ACCOUNT ID>:role/parallelcluster/*", + "Resource": "arn:aws:iam::111122223333:role/parallelcluster/*", @@ -880 +880 @@ JSON - "arn:aws:iam::<AWS ACCOUNT ID>:role/parallelcluster/*" + "arn:aws:iam::111122223333:role/parallelcluster/*" @@ -897 +897 @@ JSON - "arn:aws:iam::<AWS ACCOUNT ID>:role/parallelcluster/*" + "arn:aws:iam::111122223333:role/parallelcluster/*" @@ -914 +914 @@ JSON - "Resource": "arn:aws:iam::<AWS ACCOUNT ID>:role/parallelcluster/*", + "Resource": "arn:aws:iam::111122223333:role/parallelcluster/*", @@ -927,2 +927,2 @@ JSON - "arn:aws:iam::<AWS ACCOUNT ID>:policy/parallelcluster*", - "arn:aws:iam::<AWS ACCOUNT ID>:policy/parallelcluster/*", + "arn:aws:iam::111122223333:policy/parallelcluster*", + "arn:aws:iam::111122223333:policy/parallelcluster/*", @@ -946 +946 @@ JSON - "Resource": "arn:aws:iam::<AWS ACCOUNT ID>:role/parallelcluster/*", + "Resource": "arn:aws:iam::111122223333:role/parallelcluster/*", @@ -1017,2 +1017,2 @@ JSON - "arn:aws:s3:::<REGION>-aws-parallelcluster/*", - "arn:aws:s3:::dcv-license.<REGION>/*", + "arn:aws:s3:::us-east-1-aws-parallelcluster/*", + "arn:aws:s3:::dcv-license.us-east-1/*", @@ -1031 +1031 @@ JSON - "Resource": "arn:aws:dynamodb:<REGION>:<AWS ACCOUNT ID>:table/parallelcluster-*", + "Resource": "arn:aws:dynamodb:us-east-1:111122223333:table/parallelcluster-*", @@ -1064,2 +1064,2 @@ JSON - "arn:aws:iam::<AWS ACCOUNT ID>:role/parallelcluster/*", - "arn:aws:iam::<AWS ACCOUNT ID>:instance-profile/parallelcluster/*" + "arn:aws:iam::111122223333:role/parallelcluster/*", + "arn:aws:iam::111122223333:instance-profile/parallelcluster/*" @@ -1086,2 +1086,2 @@ JSON - "arn:aws:ec2:<REGION>:<AWS ACCOUNT ID>:instance/*", - "arn:aws:ec2:<REGION>:<AWS ACCOUNT ID>:volume/*" + "arn:aws:ec2:us-east-1:111122223333:instance/*", + "arn:aws:ec2:us-east-1:111122223333:volume/*" @@ -1109 +1109 @@ JSON - "Resource": "arn:aws:secretsmanager:<REGION>:<AWS ACCOUNT ID>:secret:<SECRET_ID>", + "Resource": "arn:aws:secretsmanager:us-east-1:111122223333:secret:<SECRET_ID>", @@ -1152,2 +1152,2 @@ JSON - "arn:aws:s3:::dcv-license.<REGION>/*", - "arn:aws:s3:::<REGION>-aws-parallelcluster/*" + "arn:aws:s3:::dcv-license.us-east-1/*", + "arn:aws:s3:::us-east-1-aws-parallelcluster/*" @@ -1169,2 +1169,2 @@ JSON - "arn:aws:iam::<AWS ACCOUNT ID>:role/parallelcluster/*", - "arn:aws:iam::<AWS ACCOUNT ID>:instance-profile/parallelcluster/*" + "arn:aws:iam::111122223333:role/parallelcluster/*", + "arn:aws:iam::111122223333:instance-profile/parallelcluster/*" @@ -1193,6 +1193,6 @@ JSON - "arn:aws:logs:<REGION>:<AWS ACCOUNT ID>:log-group:/aws/batch/job:log-stream:PclusterJobDefinition*", - "arn:aws:ecs:<REGION>:<AWS ACCOUNT ID>:container-instance/AWSBatch-PclusterComputeEnviron*", - "arn:aws:ecs:<REGION>:<AWS ACCOUNT ID>:cluster/AWSBatch-Pcluster*", - "arn:aws:batch:<REGION>:<AWS ACCOUNT ID>:job-queue/PclusterJobQueue*", - "arn:aws:batch:<REGION>:<AWS ACCOUNT ID>:job-definition/PclusterJobDefinition*:*", - "arn:aws:batch:<REGION>:<AWS ACCOUNT ID>:job/*" + "arn:aws:logs:us-east-1:111122223333:log-group:/aws/batch/job:log-stream:PclusterJobDefinition*", + "arn:aws:ecs:us-east-1:111122223333:container-instance/AWSBatch-PclusterComputeEnviron*", + "arn:aws:ecs:us-east-1:111122223333:cluster/AWSBatch-Pcluster*", + "arn:aws:batch:us-east-1:111122223333:job-queue/PclusterJobQueue*", + "arn:aws:batch:us-east-1:111122223333:job-definition/PclusterJobDefinition*:*", + "arn:aws:batch:us-east-1:111122223333:job/*" @@ -1218,2 +1218,2 @@ JSON - "arn:aws:ec2:<REGION>:<AWS ACCOUNT ID>:instance/*", - "arn:aws:ec2:<REGION>:<AWS ACCOUNT ID>:volume/*" + "arn:aws:ec2:us-east-1:111122223333:instance/*", + "arn:aws:ec2:us-east-1:111122223333:volume/*" @@ -1234 +1234 @@ JSON - "Resource": "arn:aws:secretsmanager:<REGION>:<AWS ACCOUNT ID>:secret:<SECRET_ID>", + "Resource": "arn:aws:secretsmanager:us-east-1:111122223333:secret:<SECRET_ID>", @@ -1298 +1298 @@ JSON - "Resource": "arn:aws:logs:<REGION>:<AWS ACCOUNT ID>:log-group:/aws/lambda/pcluster-*" + "Resource": "arn:aws:logs:us-east-1:111122223333:log-group:/aws/lambda/pcluster-*" @@ -1362 +1362 @@ JSON - "Resource": "arn:aws:dynamodb:<REGION>:<AWS ACCOUNT ID>:table/parallelcluster-*", + "Resource": "arn:aws:dynamodb:us-east-1:111122223333:table/parallelcluster-*", @@ -1368 +1368 @@ JSON - "arn:aws:s3:::<REGION>-aws-parallelcluster/*" + "arn:aws:s3:::us-east-1-aws-parallelcluster/*" @@ -1380 +1380 @@ JSON - "arn:aws:cloudformation:<REGION>:<AWS ACCOUNT ID>:stack/*/*" + "arn:aws:cloudformation:us-east-1:111122223333:stack/*/*" @@ -1442 +1442 @@ JSON - "Resource": "arn:aws:ec2:<REGION>::image/*", + "Resource": "arn:aws:ec2:us-east-1::image/*", @@ -1484 +1484 @@ JSON - "Resource": "arn:aws:iam::<AWS ACCOUNT ID>:role/parallelcluster/*", + "Resource": "arn:aws:iam::111122223333:role/parallelcluster/*", @@ -1492 +1492 @@ JSON - "Resource": "arn:aws:iam::<AWS ACCOUNT ID>:instance-profile/parallelcluster/*", + "Resource": "arn:aws:iam::111122223333:instance-profile/parallelcluster/*", @@ -1497 +1497 @@ JSON - "Resource": "arn:aws:imagebuilder:<REGION>:<AWS ACCOUNT ID>:infrastructure-configuration/parallelclusterimage-*", + "Resource": "arn:aws:imagebuilder:us-east-1:111122223333:infrastructure-configuration/parallelclusterimage-*", @@ -1505 +1505 @@ JSON - "arn:aws:imagebuilder:<REGION>:<AWS ACCOUNT ID>:component/parallelclusterimage-*/*" + "arn:aws:imagebuilder:us-east-1:111122223333:component/parallelclusterimage-*/*"