AWS AWSCloudFormation high security documentation change
Summary
Corrected IAM role ARN in DynamoDB Auto Scaling example
Security assessment
Fixes incorrect service-specific IAM role reference that could lead to privilege escalation if misconfigured
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/quickref-dynamodb.md b/AWSCloudFormation/latest/UserGuide/quickref-dynamodb.md index 1a462e53e..6269ddb3d 100644 --- a//AWSCloudFormation/latest/UserGuide/quickref-dynamodb.md +++ b//AWSCloudFormation/latest/UserGuide/quickref-dynamodb.md @@ -94 +94 @@ This example sets up Application Auto Scaling for a `AWS::DynamoDB::Table` resou - "RoleARN" : { "Fn::Sub" : "arn:aws:iam::${AWS::AccountId}:role/aws-service-role/rds.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_RDSCluster" }, + "RoleARN" : { "Fn::Sub" : "arn:aws:iam::${AWS::AccountId}:role/aws-service-role/dynamodb.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_DynamoDBTable" },