AWS AmazonECS documentation change
Summary
Corrected SecretsManager ARN format and simplified resource declarations
Security assessment
Fixes misconfigured SSM references to use SecretsManager (secure secret storage), enhancing security guidance without addressing an explicit vulnerability.
Diff
diff --git a/AmazonECS/latest/developerguide/linux-gmsa.md b/AmazonECS/latest/developerguide/linux-gmsa.md index 8bd1aa4f2..639a6b50a 100644 --- a//AmazonECS/latest/developerguide/linux-gmsa.md +++ b//AmazonECS/latest/developerguide/linux-gmsa.md @@ -205,3 +205 @@ JSON - "Resource": [ - "arn:aws:ssm:arn:aws: 111122223333:secret:MySecret" - ] + "Resource": "arn:aws:secretsmanager:us-east-1:123456789012:secret:my-secret-AbCdEf" @@ -308,3 +306 @@ JSON - "Resource": [ - "arn:aws:ssm:arn:aws::111122223333:parameter/parameter_name" - ] + "Resource": "arn:aws:ssm:us-east-1:123456789012:parameter/my-parameter"