AWS step-functions documentation change
Summary
Updated example ARNs with specific account/region values
Security assessment
Changes standardize example resource ARNs but do not introduce security-related content or address vulnerabilities.
Diff
diff --git a/step-functions/latest/dg/iam-policies-eg-dist-map.md b/step-functions/latest/dg/iam-policies-eg-dist-map.md index ac04562fd..5ff66a155 100644 --- a//step-functions/latest/dg/iam-policies-eg-dist-map.md +++ b//step-functions/latest/dg/iam-policies-eg-dist-map.md @@ -35 +35 @@ Make sure that you replace ``stateMachineName`` with the name of the state machi - "arn:aws:states:region:account-id:stateMachine:stateMachineName" + "arn:aws:states:us-east-1:123456789012:stateMachine:myStateMachineName" @@ -43 +43 @@ Make sure that you replace ``stateMachineName`` with the name of the state machi - "Resource": "arn:aws:states:region:account-id:execution:stateMachineName:*" + "Resource": "arn:aws:states:us-east-1:123456789012:execution:myStateMachineName:*" @@ -67 +67 @@ Make sure that you replace ``stateMachineName`` with the name of the state machi - "Resource": "arn:aws:states:us-east-2:account-id:execution:stateMachineName/myMapRunLabel:*" + "Resource": "arn:aws:states:us-east-2:123456789012:execution:myStateMachineName/myMapRunLabel:*" @@ -137,2 +137,2 @@ The following example shows an IAM policy that grants least privileges to access - "arn:aws:s3:::destination-prefix/amzn-s3-demo-bucket/config-id/YYYY-MM-DDTHH-MMZ/manifest.json", - "arn:aws:s3:::destination-prefix/amzn-s3-demo-bucket/config-id/data/*" + "arn:aws:s3:::myDestination-prefix/amzn-s3-demo-bucket/myConfig-id/YYYY-MM-DDTHH-MMZ/manifest.json", + "arn:aws:s3:::myDestination-prefix/amzn-s3-demo-bucket/myConfig-id/data/*" @@ -184 +184 @@ The following IAM policy example grants permission to the `kms:Decrypt`, `kms:En - "arn:aws:kms:region:account-id:key/111aa2bb-333c-4d44-5555-a111bb2c33dd" + "arn:aws:kms:us-east-1:123456789012:key/111aa2bb-333c-4d44-5555-a111bb2c33dd"