AWS sagemaker-unified-studio documentation change
Summary
Replaced placeholder ARNs (${...}) with concrete example values in IAM policy examples.
Security assessment
Changes improve documentation clarity by providing concrete examples but do not introduce new security controls or address vulnerabilities. Placeholder replacement is a documentation improvement rather than a security fix.
Diff
diff --git a/sagemaker-unified-studio/latest/adminguide/amazon-bedrock-key-permissions.md b/sagemaker-unified-studio/latest/adminguide/amazon-bedrock-key-permissions.md index 1a8979f98..391975197 100644 --- a//sagemaker-unified-studio/latest/adminguide/amazon-bedrock-key-permissions.md +++ b//sagemaker-unified-studio/latest/adminguide/amazon-bedrock-key-permissions.md @@ -22 +22 @@ JSON - "AWS": "${ADMINISTRATOR_IAM_PRINCIPAL_ARN}" + "AWS": "arn:aws:iam::111122223333:role/ExampleAdminRole" @@ -48,2 +48,2 @@ JSON - "${ADMINISTRATOR_IAM_PRINCIPAL_ARN}", - "${ARNS_OF_ANY_DOMAIN_IAM_USERS}", + "arn:aws:iam::111122223333:role/ExampleAdminRole", + "arn:aws:iam::111122223333:role/ExampleDomainUser", @@ -238 +238 @@ JSON - "Resource": "arn:aws:kms:us-east-1:${KEY_ACCOUNT_ID}:key/${DOMAIN_KEY_ID}" + "Resource": "arn:aws:kms:us-east-1:111122223333:key/dzd-12345" @@ -248 +248 @@ JSON - "Resource": "arn:aws:kms:us-east-1:${KEY_ACCOUNT_ID}:key/${DOMAIN_KEY_ID}", + "Resource": "arn:aws:kms:us-east-1:111122223333:key/dzd-12345", @@ -274 +274 @@ JSON - "Resource": "arn:aws:kms:us-east-1:${KEY_ACCOUNT_ID}:key/${TOOLING_BLUEPRINT_KEY_ID}" + "Resource": "arn:aws:kms:us-east-1:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab" @@ -283 +283 @@ JSON - "Resource": "arn:aws:kms:us-east-1:${KEY_ACCOUNT_ID}:key/${TOOLING_BLUEPRINT_KEY_ID}", + "Resource": "arn:aws:kms:us-east-1:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab", @@ -298 +298 @@ JSON - "Resource": "arn:aws:kms:us-east-1:${KEY_ACCOUNT_ID}:key/${TOOLING_BLUEPRINT_KEY_ID}", + "Resource": "arn:aws:kms:us-east-1:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab", @@ -316 +316 @@ JSON - "Resource": "arn:aws:kms:us-east-1:${KEY_ACCOUNT_ID}:key/${TOOLING_BLUEPRINT_KEY_ID}", + "Resource": "arn:aws:kms:us-east-1:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab", @@ -334 +334 @@ JSON - "Resource": "arn:aws:kms:us-east-1:${KEY_ACCOUNT_ID}:key/${TOOLING_BLUEPRINT_KEY_ID}", + "Resource": "arn:aws:kms:us-east-1:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab",