AWS odb documentation change
Summary
Removed JSON IAM policy example for Zero-ETL integration permissions
Security assessment
Deletion of policy example reduces documentation about required permissions but doesn't address a specific security vulnerability. Impacts clarity for secure configuration of integrations.
Diff
diff --git a/odb/latest/UserGuide/zero-etl-prerequisites.md b/odb/latest/UserGuide/zero-etl-prerequisites.md index e2ac0c17b..020ad6ae3 100644 --- a//odb/latest/UserGuide/zero-etl-prerequisites.md +++ b//odb/latest/UserGuide/zero-etl-prerequisites.md @@ -227,52 +226,0 @@ Create IAM policies that allow Zero-ETL integration operations. The following ex -JSON - - -**** - - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": [ - "glue:CreateIntegration" - ], - "Resource": [ - "arn:aws:odb:us-east-1:account:cloud-vm-cluster/cluster-id", - "arn:aws:glue:us-east-1:account:integration:*" - ] - }, - { - "Effect": "Allow", - "Action": [ - "odb:CreateOutboundIntegration" - ], - "Resource": [ - "arn:aws:odb:us-east-1:account:cloud-vm-cluster/cluster-id" - ] - }, - { - "Effect": "Allow", - "Action": [ - "glue:DescribeIntegrations" - ], - "Resource": [ - "*" - ] - }, - { - "Effect": "Allow", - "Action": [ - "glue:DeleteIntegration", - "glue:ModifyIntegration" - ], - "Resource": [ - "arn:aws:glue:us-east-1:account:integration:*" - ] - } - ] - } - -