AWS parallelcluster documentation change
Summary
Updated ARN patterns with concrete account ID (111122223333) and corrected service/region components in multiple resource definitions
Security assessment
Changes correct ARN formatting but do not address security vulnerabilities. Updates appear to standardize documentation examples rather than fix security flaws.
Diff
diff --git a/parallelcluster/latest/ug/tutorial-deploy-terraform-permissions.md b/parallelcluster/latest/ug/tutorial-deploy-terraform-permissions.md index 96cc4dbe6..0b84fff0b 100644 --- a//parallelcluster/latest/ug/tutorial-deploy-terraform-permissions.md +++ b//parallelcluster/latest/ug/tutorial-deploy-terraform-permissions.md @@ -24 +24 @@ JSON - "Resource": "arn:aws:us-east-1:ACCOUNT:stack/*", + "Resource": "arn:aws:cloudformation:us-east-1:111122223333:stack/*", @@ -34 +34 @@ JSON - "Resource": "arn:aws:us-east-1:ACCOUNT:stack/MyParallelClusterAPI*", + "Resource": "arn:aws:cloudformation:us-east-1:111122223333:stack/MyParallelClusterAPI*", @@ -43,2 +43,2 @@ JSON - "arn:aws:us-east-1:aws:transform/Include", - "arn:aws:us-east-1:aws:transform/Serverless-2016-10-31" + "arn:aws:cloudformation:us-east-1:111122223333:aws:transform/Include", + "arn:aws:cloudformation:us-east-1:111122223333:aws:transform/Serverless-2016-10-31" @@ -54,2 +54,2 @@ JSON - "arn:aws:::*-aws-parallelcluster/parallelcluster/*/api/ParallelCluster.openapi.yaml", - "arn:aws:::*-aws-parallelcluster/parallelcluster/*/layers/aws-parallelcluster/lambda-layer.zip" + "arn:aws:s3:us-east-1:111122223333:*-aws-parallelcluster/parallelcluster/*/api/ParallelCluster.openapi.yaml", + "arn:aws:s3:us-east-1:111122223333:*-aws-parallelcluster/parallelcluster/*/layers/aws-parallelcluster/lambda-layer.zip" @@ -76,2 +76,2 @@ JSON - "arn:aws::111122223333:role/*", - "arn:aws::111122223333:policy/*" + "arn:aws:iam::111122223333:role/*", + "arn:aws:iam::111122223333:policy/*" @@ -87,2 +87,2 @@ JSON - "arn:aws::111122223333:role/ParallelClusterLambdaRole-*", - "arn:aws::111122223333:role/APIGatewayExecutionRole-*" + "arn:aws:iam::111122223333:role/ParallelClusterLambdaRole-*", + "arn:aws:iam::111122223333:role/APIGatewayExecutionRole-*" @@ -105,2 +105,2 @@ JSON - "arn:aws:us-east-1:ACCOUNT:layer:PCLayer-*", - "arn:aws:us-east-1:ACCOUNT:function:*-ParallelClusterFunction-*" + "arn:aws:lambda:us-east-1:111122223333:layer:PCLayer-*", + "arn:aws:lambda:us-east-1:111122223333:function:*-ParallelClusterFunction-*" @@ -121 +121 @@ JSON - "arn:aws:us-east-1:ACCOUNT:log-group:/aws/lambda/*-ParallelClusterFunction-*" + "arn:aws:logs:us-east-1:111122223333:log-group:/aws/lambda/*-ParallelClusterFunction-*" @@ -136,3 +136,3 @@ JSON - "arn:aws:us-east-1::/restapis", - "arn:aws:us-east-1::/restapis/*", - "arn:aws:us-east-1::/tags/*" + "arn:aws:apigateway:us-east-1::/restapis", + "arn:aws:apigateway:us-east-1::/restapis/*", + "arn:aws:apigateway:us-east-1::/tags/*"