AWS entityresolution documentation change
Summary
Updated policy to allow cross-region AWS Glue, S3, and KMS resources
Security assessment
While cross-region access could introduce misconfiguration risks, the change itself is a feature update, not a security fix or documentation addition.
Diff
diff --git a/entityresolution/latest/userguide/create-workflow-job-role.md b/entityresolution/latest/userguide/create-workflow-job-role.md index d485b0359..fcd97c283 100644 --- a//entityresolution/latest/userguide/create-workflow-job-role.md +++ b//entityresolution/latest/userguide/create-workflow-job-role.md @@ -57 +57 @@ The following example policy supports the permissions needed to read correspondi -Your AWS Glue resources and underlying Amazon S3 resources must be in the same AWS Region as AWS Entity Resolution. +You can use AWS Glue resources and underlying Amazon S3 resources from any Region in the AWS commercial partition where AWS Glue is supported – they don't need to be in the same Region as AWS Entity Resolution. @@ -63 +63 @@ Replace each `{{user input placeholder}}` with your own information. -`aws-region` | AWS Region of your resources. Your AWS Glue resources, underlying Amazon S3 resources and AWS KMS resources must be in the same AWS Region as `AWS Entity Resolution`. +`aws-region` | AWS Region of your resources. You can use AWS Glue, Amazon S3, and AWS KMS resources from any commercial same AWS Region where these services are supported. @@ -84 +84 @@ Replace each `{{user input placeholder}}` with your own information. -`aws-region` | AWS Region of your resources. Your AWS Glue resources, underlying Amazon S3 resources and AWS KMS resources must be in the same AWS Region as `AWS Entity Resolution`. +`aws-region` | AWS Region of your resources. You can use AWS Glue, Amazon S3, and AWS KMS resources from any commercial same AWS Region where these services are supported. @@ -105 +105 @@ Replace each `{{user input placeholder}}` with your own information. -`aws-region` | AWS Region of your resources. Your AWS Glue resources, underlying Amazon S3 resources and AWS KMS resources must be in the same AWS Region as `AWS Entity Resolution`. +`aws-region` | AWS Region of your resources. You can use AWS Glue, Amazon S3, and AWS KMS resources from any commercial same AWS Region where these services are supported.