AWS amazondynamodb documentation change

Service: amazondynamodb · 2025-09-28 · Documentation medium

File: amazondynamodb/latest/developerguide/cross-account-integration-considerations.md

Summary

Replaced account ID placeholders with example values and added explanatory notes about cross-account KMS/IAM policies

Security assessment

The changes clarify cross-account configuration details for encryption and access policies, which are security-related best practices. However, there's no evidence of addressing a specific security vulnerability.

Diff

diff --git a/amazondynamodb/latest/developerguide/cross-account-integration-considerations.md b/amazondynamodb/latest/developerguide/cross-account-integration-considerations.md
index d7db74412..a1ae3c59a 100644
--- a//amazondynamodb/latest/developerguide/cross-account-integration-considerations.md
+++ b//amazondynamodb/latest/developerguide/cross-account-integration-considerations.md
@@ -15 +15 @@ Replace the following placeholders in the examples:
-  * `REDSHIFT_ACCOUNT_ID`: The AWS account ID where Amazon Redshift is hosted
+  * `111122223333`: The AWS account ID where Amazon Redshift is hosted
@@ -17 +17 @@ Replace the following placeholders in the examples:
-  * `DYNAMODB_ACCOUNT_ID`: The AWS account ID where DynamoDB is hosted
+  * `444455556666`: The AWS account ID where DynamoDB is hosted
@@ -31,0 +32,2 @@ Replace the following placeholders in the examples:
+The following AWS KMS key policy enables cross-account access between your DynamoDB and Amazon Redshift services. In this example, account 444455556666 contains the DynamoDB table and AWS KMS key, while account 111122223333 contains the Amazon Redshift cluster that needs access to decrypt the data.
+
@@ -70,0 +73,2 @@ JSON
+The following IAM policy allows a Amazon Redshift service to access DynamoDB tables and their associated AWS KMS encryption keys in a cross-account scenario. In this example, account 444455556666 contains the DynamoDB resources and AWS KMS keys that the Amazon Redshift service needs to access.
+
@@ -140,0 +145,2 @@ JSON
+The following resource-based policy allows a Amazon Redshift service in account 111122223333 to access DynamoDB tables and Streams in account 444455556666. Attach this policy to your DynamoDB table to enable cross-account access.
+