AWS Security ChangesHomeSearch

AWS lambda documentation change

Service: lambda · 2025-08-25 · Documentation low

File: lambda/latest/dg/with-msk-permissions.md

Summary

Updated API reference links for Kafka permissions and clarified cross-account VPC connection requirements.

Security assessment

The changes update documentation links and clarify permissions for SCRAM secrets and cross-account VPC connections, which relate to authentication and access control. However, there is no evidence of addressing a specific security vulnerability.

Diff

diff --git a/lambda/latest/dg/with-msk-permissions.md b/lambda/latest/dg/with-msk-permissions.md
index b657c62eb..53869c752 100644
--- a//lambda/latest/dg/with-msk-permissions.md
+++ b//lambda/latest/dg/with-msk-permissions.md
@@ -45 +45 @@ For Lambda to access your Amazon MSK cluster on your behalf, your Lambda functio
-  * [kafka:DescribeCluster](https://docs.aws.amazon.com/MSK/latest/APIReference/API_DescribeCluster.html)
+  * [kafka:DescribeCluster](https://docs.aws.amazon.com/msk/1.0/apireference/clusters-clusterarn.html)
@@ -47 +47 @@ For Lambda to access your Amazon MSK cluster on your behalf, your Lambda functio
-  * [kafka:DescribeClusterV2](https://docs.aws.amazon.com/MSK/latest/APIReference/API_DescribeClusterV2.html)
+  * [kafka:DescribeClusterV2](https://docs.aws.amazon.com/MSK/2.0/APIReference/v2-clusters-clusterarn.html)
@@ -49 +49 @@ For Lambda to access your Amazon MSK cluster on your behalf, your Lambda functio
-  * [kafka:GetBootstrapBrokers](https://docs.aws.amazon.com/MSK/latest/APIReference/API_GetBootstrapBrokers.html)
+  * [kafka:GetBootstrapBrokers](https://docs.aws.amazon.com/msk/1.0/apireference/clusters-clusterarn-bootstrap-brokers.html)
@@ -51 +51 @@ For Lambda to access your Amazon MSK cluster on your behalf, your Lambda functio
-  * [kafka:DescribeVpcConnection](https://docs.aws.amazon.com/MSK/latest/APIReference/API_DescribeVpcConnection.html): Only required for cross-account event source mappings.
+  * [kafka:DescribeVpcConnection](https://docs.aws.amazon.com/msk/1.0/apireference/vpc-connection-arn.html): Only required for cross-account event source mappings.
@@ -53 +53 @@ For Lambda to access your Amazon MSK cluster on your behalf, your Lambda functio
-  * [kafka:ListVpcConnections](https://docs.aws.amazon.com/MSK/latest/APIReference/API_ListVpcConnections.html): Not required in execution role, but required for an IAM principal that is creating a cross-account event source mapping.
+  * [kafka:ListVpcConnections](https://docs.aws.amazon.com/msk/1.0/apireference/vpc-connections.html): Not required in execution role, but required for an IAM principal that is creating a cross-account event source mapping.
@@ -106 +106 @@ These correspond to the following required permissions:
-  * [kafka:ListScramSecrets](https://docs.aws.amazon.com/MSK/latest/APIReference/API_ListScramSecrets.html) \- Allows listing of SCRAM secrets for Kafka authentication
+  * [kafka:ListScramSecrets](https://docs.aws.amazon.com/msk/1.0/apireference/clusters-clusterarn-scram-secrets.html) \- Allows listing of SCRAM secrets for Kafka authentication