AWS glue documentation change

Service: glue · 2025-08-28 · Documentation low

File: glue/latest/dg/upgrade-analysis.md

Summary

Updated job ARNs to 111122223333 account ID, reformatted actions, and removed/updated policy examples for upgrade analysis permissions

Security assessment

Changes appear to standardize examples rather than address security issues. Modified IAM policies maintain equivalent permissions structure.

Diff

diff --git a/glue/latest/dg/upgrade-analysis.md b/glue/latest/dg/upgrade-analysis.md
index 30741c2f1..ca4aca4b1 100644
--- a//glue/latest/dg/upgrade-analysis.md
+++ b//glue/latest/dg/upgrade-analysis.md
@@ -39,53 +38,0 @@ The following prerequisites are required to use generative AI to upgrade jobs in
-JSON
-    
-
-****
-    
-    
-        {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Action": [
-                    "glue:StartJobUpgradeAnalysis",
-                    "glue:StartJobRun",
-                    "glue:GetJobRun",
-                    "glue:GetJob",
-                    "glue:BatchStopJobRun"
-                ],
-                "Resource": [
-                    "arn:aws:glue:us-east-1:111122223333:job/jobName"
-                ]
-            },
-            {
-                "Effect": "Allow",
-                "Action": [
-                    "s3:GetObject"
-                ],
-                "Resource": [
-                    "arn:aws:s3:::/script-location/*"
-                ]
-            },
-            {
-                "Effect": "Allow",
-                "Action": [
-                    "s3:PutObject",
-                    "s3:GetObject"
-                ],
-                "Resource": [
-                    "arn:aws:s3:::/results/*"
-                ]
-            },
-            {
-                "Effect": "Allow",
-                "Action": [
-                    "kms:Decrypt",
-                    "kms:GenerateDataKey"
-                ],
-                "Resource": "arn:aws:kms:us-east-1:111122223333:key/key-id"
-            }
-        ]
-    }
-    
-
@@ -129 +76,3 @@ JSON
-          "Action": ["glue:GetJobUpgradeAnalysis"],
+          "Action": [
+            "glue:GetJobUpgradeAnalysis"
+          ],
@@ -131 +80 @@ JSON
-            "arn:aws:glue:us-east-1:123456789012:job/jobName"
+            "arn:aws:glue:us-east-1:111122223333:job/jobName"
@@ -150 +99,2 @@ JSON
-          "Action": ["glue:StopJobUpgradeAnalysis",
+          "Action": [
+            "glue:StopJobUpgradeAnalysis",
@@ -154,22 +104 @@ JSON
-            "arn:aws:glue:us-east-1:123456789012:job/jobName"
-          ]
-        }
-      ]
-    }
-    
-
-JSON
-    
-
-****
-    
-    
-    
-    {
-      "Version": "2012-10-17",
-      "Statement": [
-        {
-          "Effect": "Allow",
-          "Action": ["glue:ListJobUpgradeAnalyses"],
-          "Resource": [
-            "arn:aws:glue:us-east-1:123456789012:job/jobName"
+            "arn:aws:glue:us-east-1:111122223333:job/jobName"
@@ -194,2 +123,2 @@ JSON
-          "Action": ["glue:UpdateJob",
-                     "glue:UpgradeJob"
+          "Action": [
+            "glue:ListJobUpgradeAnalyses"
@@ -198,8 +127 @@ JSON
-            "arn:aws:glue:us-east-1:123456789012:job/jobName"
-          ]
-        },
-        {
-          "Effect": "Allow",
-          "Action": ["iam:PassRole"],
-          "Resource": [
-            "<Role arn associated with the job>"
+            "arn:aws:glue:us-east-1:111122223333:job/jobName"