AWS lambda documentation change
Summary
Updated API reference links for Kafka permissions and clarified cross-account VPC connection requirements.
Security assessment
The changes update documentation links and clarify permissions for SCRAM secrets and cross-account VPC connections, which relate to authentication and access control. However, there is no evidence of addressing a specific security vulnerability.
Diff
diff --git a/lambda/latest/dg/with-msk-permissions.md b/lambda/latest/dg/with-msk-permissions.md index b657c62eb..53869c752 100644 --- a//lambda/latest/dg/with-msk-permissions.md +++ b//lambda/latest/dg/with-msk-permissions.md @@ -45 +45 @@ For Lambda to access your Amazon MSK cluster on your behalf, your Lambda functio - * [kafka:DescribeCluster](https://docs.aws.amazon.com/MSK/latest/APIReference/API_DescribeCluster.html) + * [kafka:DescribeCluster](https://docs.aws.amazon.com/msk/1.0/apireference/clusters-clusterarn.html) @@ -47 +47 @@ For Lambda to access your Amazon MSK cluster on your behalf, your Lambda functio - * [kafka:DescribeClusterV2](https://docs.aws.amazon.com/MSK/latest/APIReference/API_DescribeClusterV2.html) + * [kafka:DescribeClusterV2](https://docs.aws.amazon.com/MSK/2.0/APIReference/v2-clusters-clusterarn.html) @@ -49 +49 @@ For Lambda to access your Amazon MSK cluster on your behalf, your Lambda functio - * [kafka:GetBootstrapBrokers](https://docs.aws.amazon.com/MSK/latest/APIReference/API_GetBootstrapBrokers.html) + * [kafka:GetBootstrapBrokers](https://docs.aws.amazon.com/msk/1.0/apireference/clusters-clusterarn-bootstrap-brokers.html) @@ -51 +51 @@ For Lambda to access your Amazon MSK cluster on your behalf, your Lambda functio - * [kafka:DescribeVpcConnection](https://docs.aws.amazon.com/MSK/latest/APIReference/API_DescribeVpcConnection.html): Only required for cross-account event source mappings. + * [kafka:DescribeVpcConnection](https://docs.aws.amazon.com/msk/1.0/apireference/vpc-connection-arn.html): Only required for cross-account event source mappings. @@ -53 +53 @@ For Lambda to access your Amazon MSK cluster on your behalf, your Lambda functio - * [kafka:ListVpcConnections](https://docs.aws.amazon.com/MSK/latest/APIReference/API_ListVpcConnections.html): Not required in execution role, but required for an IAM principal that is creating a cross-account event source mapping. + * [kafka:ListVpcConnections](https://docs.aws.amazon.com/msk/1.0/apireference/vpc-connections.html): Not required in execution role, but required for an IAM principal that is creating a cross-account event source mapping. @@ -106 +106 @@ These correspond to the following required permissions: - * [kafka:ListScramSecrets](https://docs.aws.amazon.com/MSK/latest/APIReference/API_ListScramSecrets.html) \- Allows listing of SCRAM secrets for Kafka authentication + * [kafka:ListScramSecrets](https://docs.aws.amazon.com/msk/1.0/apireference/clusters-clusterarn-scram-secrets.html) \- Allows listing of SCRAM secrets for Kafka authentication