AWS Security ChangesHomeSearch

AWS bedrock documentation change

Service: bedrock · 2025-08-22 · Documentation low

File: bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md

Summary

Updated resource ARNs and changed IAM principal from array to string in service role policies.

Security assessment

Corrected IAM principal syntax in knowledge base policies. No security vulnerabilities addressed; changes ensure policy examples are syntactically valid.

Diff

diff --git a/bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md b/bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md
index d8d894bca..5456306d4 100644
--- a//bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md
+++ b//bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md
@@ -29 +29 @@ JSON
-                "Resource": "arn:aws:bedrock:us-east-1:123456789012:domain/<domainName>"
+                "Resource": "arn:aws:bedrock:us-east-1:123456789012:domain/DomainName"
@@ -144,3 +144 @@ JSON
-                    "AWS": [
-                        "arn:aws:es:123456789012:role/service-role/KnowledgeBaseServiceRoleName"
-                    ]
+                    "AWS": "arn:aws:es:us-east-1:123456789012:role/service-role/KnowledgeBaseServiceRoleName"
@@ -161,3 +159 @@ JSON
-                    "AWS": [
-                        "arn:aws:es:123456789012:(role|service-role)/KnowledgeBaseServiceRoleName"
-                    ]
+                    "AWS": "arn:aws:es:us-east-1:123456789012:(role|service-role)/KnowledgeBaseServiceRoleName"
@@ -173,3 +169 @@ JSON
-                    "AWS": [
-                        "arn:aws:es:123456789012:(role|service-role)/KnowledgeBaseServiceRoleName"
-                    ]
+                    "AWS": "arn:aws:es:us-east-1:123456789012:(role|service-role)/KnowledgeBaseServiceRoleName"