AWS firehose documentation change
Summary
Replaced hardcoded secret and KMS key ARNs with placeholder values (Secret ARN, KMSKeyARN) in IAM policy examples
Security assessment
Changes promote secure practices by discouraging hardcoded credentials in policies, but do not address any specific known vulnerability
Diff
diff --git a/firehose/latest/dev/secrets-manager-how.md b/firehose/latest/dev/secrets-manager-how.md index aa449834d..3fbcc8532 100644 --- a//firehose/latest/dev/secrets-manager-how.md +++ b//firehose/latest/dev/secrets-manager-how.md @@ -45,6 +44,0 @@ For more information on IAM policies, see [Permissions policy examples for AWS S -JSON - - -**** - - @@ -56 +50 @@ JSON - "Resource": "arn:aws:secretsmanager:us-east-1:123456789012:secret:mySecret-abc123" + "Resource": "Secret ARN" @@ -61 +55 @@ JSON - "Resource": "arn:aws:kms:us-east-1:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab" + "Resource": "KMSKeyARN"