AWS step-functions documentation change
Summary
Updated multiple Bedrock service ARNs with specific region (us-east-1) and account ID (123456789012) values in IAM policy examples
Security assessment
Changes standardize documentation examples but show no evidence of addressing security issues or introducing new security features
Diff
diff --git a/step-functions/latest/dg/connect-bedrock.md b/step-functions/latest/dg/connect-bedrock.md index afda39457..8d5a52837 100644 --- a//step-functions/latest/dg/connect-bedrock.md +++ b//step-functions/latest/dg/connect-bedrock.md @@ -135 +135 @@ The following is an IAM policy example for a state machine that accesses a speci - "arn:aws:bedrock:region::foundation-model/amazon.titan-text-express-v1" + "arn:aws:bedrock:us-east-1::foundation-model/amazon.titan-text-express-v1" @@ -156 +156 @@ The following is an IAM policy example for a state machine that accesses a speci - "arn:aws:bedrock:region:account-id:provisioned-model/c2oi931ulksx" + "arn:aws:bedrock:us-east-1:123456789012:provisioned-model/c2oi931ulksx" @@ -177,2 +177,2 @@ The following is an IAM policy example for a state machine that provides full ac - "arn:aws:bedrock:region::foundation-model/*", - "arn:aws:bedrock:region:account-id:provisioned-model/*" + "arn:aws:bedrock:us-east-1::foundation-model/*", + "arn:aws:bedrock:us-east-1:123456789012:provisioned-model/*" @@ -199,3 +199,3 @@ The following is an IAM policy example for a state machine to access a specific - "arn:aws:bedrock:region::foundation-model/amazon.titan-text-express-v1", - "arn:aws:bedrock:region:account-id:custom-model/*", - "arn:aws:bedrock:region:account-id:model-customization-job/*" + "arn:aws:bedrock:us-east-1::foundation-model/amazon.titan-text-express-v1", + "arn:aws:bedrock:us-east-1:123456789012:custom-model/*", + "arn:aws:bedrock:us-east-1:123456789012:model-customization-job/*" @@ -211 +211 @@ The following is an IAM policy example for a state machine to access a specific - "arn:aws:iam::account-id:role/myRole" + "arn:aws:iam::123456789012:role/myRole" @@ -232,2 +232,2 @@ The following is an IAM policy example for a state machine to access a specific - "arn:aws:bedrock:region:account-id:custom-model/*", - "arn:aws:bedrock:region:account-id:model-customization-job/*" + "arn:aws:bedrock:us-east-1:123456789012:custom-model/*", + "arn:aws:bedrock:us-east-1:123456789012:model-customization-job/*" @@ -243 +243 @@ The following is an IAM policy example for a state machine to access a specific - "arn:aws:iam::account-id:role/roleName" + "arn:aws:iam::123456789012:role/myRoleName" @@ -264,3 +264,3 @@ The following is an IAM policy example for a state machine that provides full ac - "arn:aws:bedrock:region::foundation-model/*", - "arn:aws:bedrock:region:account-id:custom-model/*", - "arn:aws:bedrock:region:account-id:model-customization-job/*" + "arn:aws:bedrock:us-east-1::foundation-model/*", + "arn:aws:bedrock:us-east-1:123456789012:custom-model/*", + "arn:aws:bedrock:us-east-1:123456789012:model-customization-job/*" @@ -276 +276 @@ The following is an IAM policy example for a state machine that provides full ac - "arn:aws:iam::account-id:role/myRole" + "arn:aws:iam::123456789012:role/myRole" @@ -297,3 +297,3 @@ The following is an IAM policy example for a state machine to access a specific - "arn:aws:bedrock:region::foundation-model/amazon.titan-text-express-v1", - "arn:aws:bedrock:region:account-id:custom-model/*", - "arn:aws:bedrock:region:account-id:model-customization-job/*" + "arn:aws:bedrock:us-east-1::foundation-model/amazon.titan-text-express-v1", + "arn:aws:bedrock:us-east-1:123456789012:custom-model/*", + "arn:aws:bedrock:us-east-1:123456789012:model-customization-job/*" @@ -310 +310 @@ The following is an IAM policy example for a state machine to access a specific - "arn:aws:bedrock:region:account-id:model-customization-job/*" + "arn:aws:bedrock:us-east-1:123456789012:model-customization-job/*" @@ -320 +320 @@ The following is an IAM policy example for a state machine to access a specific - "arn:aws:iam::account-id:role/myRole" + "arn:aws:iam::123456789012:role/myRole" @@ -341,2 +341,2 @@ The following is an IAM policy example for a state machine to access a custom mo - "arn:aws:bedrock:region:account-id:custom-model/*", - "arn:aws:bedrock:region:account-id:model-customization-job/*" + "arn:aws:bedrock:us-east-1:123456789012:custom-model/*", + "arn:aws:bedrock:us-east-1:123456789012:model-customization-job/*" @@ -353 +353 @@ The following is an IAM policy example for a state machine to access a custom mo - "arn:aws:bedrock:region:account-id:model-customization-job/*" + "arn:aws:bedrock:us-east-1:123456789012:model-customization-job/*" @@ -363 +363 @@ The following is an IAM policy example for a state machine to access a custom mo - "arn:aws:iam::account-id:role/myRole" + "arn:aws:iam::123456789012:role/myRole" @@ -384,3 +384,3 @@ The following is an IAM policy example for a state machine that provides full ac - "arn:aws:bedrock:region::foundation-model/*", - "arn:aws:bedrock:region:account-id:custom-model/*", - "arn:aws:bedrock:region:account-id:model-customization-job/*" + "arn:aws:bedrock:us-east-1::foundation-model/*", + "arn:aws:bedrock:us-east-1:123456789012:custom-model/*", + "arn:aws:bedrock:us-east-1:123456789012:model-customization-job/*" @@ -397 +397 @@ The following is an IAM policy example for a state machine that provides full ac - "arn:aws:bedrock:region:account-id:model-customization-job/*" + "arn:aws:bedrock:us-east-1:123456789012:model-customization-job/*" @@ -407 +407 @@ The following is an IAM policy example for a state machine that provides full ac - "arn:aws:iam::account-id:role/myRole" + "arn:aws:iam::123456789012:role/myRole"