AWS greengrass documentation change
Summary
Updated all IoT Core ARNs in policy examples to include specific region (us-east-1) and account ID (123456789012)
Security assessment
Changes standardize examples with concrete values but don't address security vulnerabilities or add security documentation. Proper ARN formatting improves policy accuracy but doesn't change security posture.
Diff
diff --git a/greengrass/v2/developerguide/device-auth.md b/greengrass/v2/developerguide/device-auth.md index 2667113b3..5f84b9bf0 100644 --- a//greengrass/v2/developerguide/device-auth.md +++ b//greengrass/v2/developerguide/device-auth.md @@ -425 +425 @@ JSON - "Resource": "arn:aws:iot:::client/core-device-thing-name*" + "Resource": "arn:aws:iot:us-east-1:123456789012:client/core-device-thing-name*" @@ -434,4 +434,4 @@ JSON - "arn:aws:iot:::topic/$aws/things/core-device-thing-name/greengrass/health/json", - "arn:aws:iot:::topic/$aws/things/core-device-thing-name/greengrassv2/health/json", - "arn:aws:iot:::topic/$aws/things/core-device-thing-name/jobs/*", - "arn:aws:iot:::topic/$aws/things/core-device-thing-name/shadow/*" + "arn:aws:iot:us-east-1:123456789012:topic/$aws/things/core-device-thing-name/greengrass/health/json", + "arn:aws:iot:us-east-1:123456789012:topic/$aws/things/core-device-thing-name/greengrassv2/health/json", + "arn:aws:iot:us-east-1:123456789012:topic/$aws/things/core-device-thing-name/jobs/*", + "arn:aws:iot:us-east-1:123456789012:topic/$aws/things/core-device-thing-name/shadow/*" @@ -446,2 +446,2 @@ JSON - "arn:aws:iot:::topicfilter/$aws/things/core-device-thing-name/jobs/*", - "arn:aws:iot:::topicfilter/$aws/things/core-device-thing-name/shadow/*" + "arn:aws:iot:us-east-1:123456789012:topicfilter/$aws/things/core-device-thing-name/jobs/*", + "arn:aws:iot:us-east-1:123456789012:topicfilter/$aws/things/core-device-thing-name/shadow/*" @@ -453 +453 @@ JSON - "Resource": "arn:aws:iot:::rolealias/token-exchange-role-alias-name" + "Resource": "arn:aws:iot:us-east-1:123456789012:rolealias/token-exchange-role-alias-name" @@ -494 +494 @@ JSON - "arn:aws:iot:::topic/$aws/things/core-device-thing-name-gci/shadow/get" + "arn:aws:iot:us-east-1:123456789012:topic/$aws/things/core-device-thing-name-gci/shadow/get" @@ -503,2 +503,2 @@ JSON - "arn:aws:iot:::topicfilter/$aws/things/core-device-thing-name-gci/shadow/update/delta", - "arn:aws:iot:::topicfilter/$aws/things/core-device-thing-name-gci/shadow/get/accepted" + "arn:aws:iot:us-east-1:123456789012:topicfilter/$aws/things/core-device-thing-name-gci/shadow/update/delta", + "arn:aws:iot:us-east-1:123456789012:topicfilter/$aws/things/core-device-thing-name-gci/shadow/get/accepted" @@ -513,2 +513,2 @@ JSON - "arn:aws:iot:::topic/$aws/things/core-device-thing-name-gci/shadow/update/delta", - "arn:aws:iot:::topic/$aws/things/core-device-thing-name-gci/shadow/get/accepted" + "arn:aws:iot:us-east-1:123456789012:topic/$aws/things/core-device-thing-name-gci/shadow/update/delta", + "arn:aws:iot:us-east-1:123456789012:topic/$aws/things/core-device-thing-name-gci/shadow/get/accepted" @@ -530 +530 @@ JSON - "Resource": "arn:aws:iot:::thing/*" + "Resource": "arn:aws:iot:us-east-1:123456789012:thing/*" @@ -539 +539 @@ JSON - "arn:aws:iot:::thing/core-device-thing-name" + "arn:aws:iot:us-east-1:123456789012:thing/core-device-thing-name" @@ -586 +586 @@ JSON - "arn:aws:iot:::topic/*" + "arn:aws:iot:us-east-1:123456789012:topic/*" @@ -595 +595 @@ JSON - "arn:aws:iot:::topicfilter/*" + "arn:aws:iot:us-east-1:123456789012:topicfilter/*" @@ -604 +604 @@ JSON - "arn:aws:iot:::topic/*" + "arn:aws:iot:us-east-1:123456789012:topic/*" @@ -613 +613 @@ JSON - "arn:aws:iot:::thing/*" + "arn:aws:iot:us-east-1:123456789012:thing/*"