AWS glue documentation change
Summary
Updated example AWS account IDs (123456789012 → 111122223333) and regions (us-west-2 → us-east-1) in IAM policy ARNs
Security assessment
Changes only modify placeholder values in policy examples without altering security semantics. No evidence of addressing vulnerabilities or changing security controls.
Diff
diff --git a/glue/latest/dg/security_iam_id-based-policy-examples.md b/glue/latest/dg/security_iam_id-based-policy-examples.md index 97580e3e0..7ffcb6e65 100644 --- a//glue/latest/dg/security_iam_id-based-policy-examples.md +++ b//glue/latest/dg/security_iam_id-based-policy-examples.md @@ -99,4 +99,4 @@ JSON - "arn:aws:glue:us-east-1:123456789012:catalog", - "arn:aws:glue:us-east-1:123456789012:database/default", - "arn:aws:glue:us-east-1:123456789012:table/default/e*1*", - "arn:aws:glue:us-east-1:123456789012:connection/connection2" + "arn:aws:glue:us-east-1:111122223333:catalog", + "arn:aws:glue:us-east-1:111122223333:database/default", + "arn:aws:glue:us-east-1:111122223333:table/default/e*1*", + "arn:aws:glue:us-east-1:111122223333:connection/connection2" @@ -203,3 +202,3 @@ JSON - "arn:aws:glue:us-west-2:123456789012:catalog", - "arn:aws:glue:us-west-2:123456789012:database/db1", - "arn:aws:glue:us-west-2:123456789012:table/db1/books" + "arn:aws:glue:us-east-1:111122223333:catalog", + "arn:aws:glue:us-east-1:111122223333:database/db1", + "arn:aws:glue:us-east-1:111122223333:table/db1/books" @@ -232,3 +231,3 @@ JSON - "arn:aws:glue:us-west-2:123456789012:table/db1/tbl1", - "arn:aws:glue:us-west-2:123456789012:database/db1", - "arn:aws:glue:us-west-2:123456789012:catalog" + "arn:aws:glue:us-east-1:111122223333:table/db1/tbl1", + "arn:aws:glue:us-east-1:111122223333:database/db1", + "arn:aws:glue:us-east-1:111122223333:catalog" @@ -262,4 +261,4 @@ JSON - "arn:aws:glue:us-west-2:123456789012:catalog", - "arn:aws:glue:us-west-2:123456789012:database/db1", - "arn:aws:glue:us-west-2:123456789012:table/db1/store_sales", - "arn:aws:glue:us-west-2:123456789012:table/db1/stores" + "arn:aws:glue:us-east-1:111122223333:catalog", + "arn:aws:glue:us-east-1:111122223333:database/db1", + "arn:aws:glue:us-east-1:111122223333:table/db1/store_sales", + "arn:aws:glue:us-east-1:111122223333:table/db1/stores" @@ -291,3 +290,3 @@ JSON - "arn:aws:glue:us-west-2:123456789012:catalog", - "arn:aws:glue:us-west-2:123456789012:database/db1", - "arn:aws:glue:us-west-2:123456789012:table/db1/store*" + "arn:aws:glue:us-east-1:111122223333:catalog", + "arn:aws:glue:us-east-1:111122223333:database/db1", + "arn:aws:glue:us-east-1:111122223333:table/db1/store*" @@ -319,3 +318,3 @@ JSON - "arn:aws:glue:us-west-2:123456789012:catalog", - "arn:aws:glue:us-west-2:123456789012:database/db1", - "arn:aws:glue:us-west-2:123456789012:table/db1/*" + "arn:aws:glue:us-east-1:111122223333:catalog", + "arn:aws:glue:us-east-1:111122223333:database/db1", + "arn:aws:glue:us-east-1:111122223333:table/db1/*" @@ -347,2 +346,2 @@ JSON - "arn:aws:glue:us-west-2:123456789012:catalog", - "arn:aws:glue:us-west-2:123456789012:database/db1" + "arn:aws:glue:us-east-1:111122223333:catalog", + "arn:aws:glue:us-east-1:111122223333:database/db1" @@ -374,2 +373,2 @@ JSON - "arn:aws:glue:us-west-2:123456789012:catalog", - "arn:aws:glue:us-west-2:123456789012:table/db1/*" + "arn:aws:glue:us-east-1:111122223333:catalog", + "arn:aws:glue:us-east-1:111122223333:table/db1/*" @@ -420,3 +419,3 @@ JSON - "arn:aws:glue:us-west-2:123456789012:catalog", - "arn:aws:glue:us-west-2:123456789012:database/db1", - "arn:aws:glue:us-west-2:123456789012:table/db1/books" + "arn:aws:glue:us-east-1:111122223333:catalog", + "arn:aws:glue:us-east-1:111122223333:database/db1", + "arn:aws:glue:us-east-1:111122223333:table/db1/books" @@ -449,3 +448,3 @@ JSON - "arn:aws:glue:us-west-2:123456789012:catalog", - "arn:aws:glue:us-west-2:123456789012:database/db1", - "arn:aws:glue:us-west-2:123456789012:table/db1/books" + "arn:aws:glue:us-east-1:111122223333:catalog", + "arn:aws:glue:us-east-1:111122223333:database/db1", + "arn:aws:glue:us-east-1:111122223333:table/db1/books" @@ -485,13 +484,13 @@ JSON - "arn:aws:glue:us-west-2:123456789012:catalog", - "arn:aws:glue:us-west-2:123456789012:database/dev-*", - "arn:aws:glue:us-west-2:123456789012:database/prod-*", - "arn:aws:glue:us-west-2:123456789012:table/dev-*/*", - "arn:aws:glue:us-west-2:123456789012:table/*/dev-*", - "arn:aws:glue:us-west-2:123456789012:table/prod-*/*", - "arn:aws:glue:us-west-2:123456789012:table/*/prod-*", - "arn:aws:glue:us-west-2:123456789012:userDefinedFunction/dev-*/*", - "arn:aws:glue:us-west-2:123456789012:userDefinedFunction/*/dev-*", - "arn:aws:glue:us-west-2:123456789012:userDefinedFunction/prod-*/*", - "arn:aws:glue:us-west-2:123456789012:userDefinedFunction/*/prod-*", - "arn:aws:glue:us-west-2:123456789012:connection/dev-*", - "arn:aws:glue:us-west-2:123456789012:connection/prod-*" + "arn:aws:glue:us-east-1:111122223333:catalog", + "arn:aws:glue:us-east-1:111122223333:database/dev-*", + "arn:aws:glue:us-east-1:111122223333:database/prod-*", + "arn:aws:glue:us-east-1:111122223333:table/dev-*/*", + "arn:aws:glue:us-east-1:111122223333:table/*/dev-*", + "arn:aws:glue:us-east-1:111122223333:table/prod-*/*", + "arn:aws:glue:us-east-1:111122223333:table/*/prod-*", + "arn:aws:glue:us-east-1:111122223333:userDefinedFunction/dev-*/*", + "arn:aws:glue:us-east-1:111122223333:userDefinedFunction/*/dev-*", + "arn:aws:glue:us-east-1:111122223333:userDefinedFunction/prod-*/*", + "arn:aws:glue:us-east-1:111122223333:userDefinedFunction/*/prod-*", + "arn:aws:glue:us-east-1:111122223333:connection/dev-*", + "arn:aws:glue:us-east-1:111122223333:connection/prod-*" @@ -509,6 +508,6 @@ JSON - "arn:aws:glue:us-west-2:123456789012:database/prod-*", - "arn:aws:glue:us-west-2:123456789012:table/prod-*/*", - "arn:aws:glue:us-west-2:123456789012:table/*/prod-*", - "arn:aws:glue:us-west-2:123456789012:userDefinedFunction/prod-*/*", - "arn:aws:glue:us-west-2:123456789012:userDefinedFunction/*/prod-*", - "arn:aws:glue:us-west-2:123456789012:connection/prod-*" + "arn:aws:glue:us-east-1:111122223333:database/prod-*", + "arn:aws:glue:us-east-1:111122223333:table/prod-*/*", + "arn:aws:glue:us-east-1:111122223333:table/*/prod-*", + "arn:aws:glue:us-east-1:111122223333:userDefinedFunction/prod-*/*", + "arn:aws:glue:us-east-1:111122223333:userDefinedFunction/*/prod-*", + "arn:aws:glue:us-east-1:111122223333:connection/prod-*" @@ -651,29 +649,0 @@ When an administrator attaches the following policy to an identity, the identity -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": "glue:*", - "Resource": "arn:aws:glue:us-east-1:123456789012:job/*" - }, - { - "Effect": "Deny", - "Action": "glue:*", - "Resource": "arn:aws:glue:us-east-1:123456789012:job/*", - "Condition": { - "StringEquals": { - "aws:ResourceTag/Team": "Special" - } - } - } - ] - } - -