AWS parallelcluster documentation change
Summary
Fixed ARN format in IAM policy examples (added 'sts' service in role ARN and 'cloudformation' service in stack ARN)
Security assessment
Corrects ARN syntax to be properly formatted. While incorrect ARNs could lead to policy failures, there's no evidence this change addresses an active security issue. Improves documentation accuracy but doesn't introduce new security content.
Diff
diff --git a/parallelcluster/latest/ug/tutorial-create-ami-terraform-permissions.md b/parallelcluster/latest/ug/tutorial-create-ami-terraform-permissions.md index 41d20987a..9fabe69a4 100644 --- a//parallelcluster/latest/ug/tutorial-create-ami-terraform-permissions.md +++ b//parallelcluster/latest/ug/tutorial-create-ami-terraform-permissions.md @@ -28 +28 @@ JSON - "Resource": "arn:aws::111122223333:role/PCAPIUserRole-*", + "Resource": "arn:aws:sts::111122223333:role/PCAPIUserRole-*", @@ -36 +36 @@ JSON - "Resource": "arn:aws:us-east-1:ACCOUNT:stack/*", + "Resource": "arn:aws:cloudformation:us-east-1:111122223333:stack/*",