AWS security-lake medium security documentation change
Summary
Added entry about service-linked role permission update (StringLike to ArnLike)
Security assessment
The change documents a security control improvement: replacing StringLike with ArnLike in IAM conditions enforces stricter ARN matching, reducing potential misconfiguration risks.
Diff
diff --git a/security-lake/latest/userguide/doc-history.md b/security-lake/latest/userguide/doc-history.md index 03d0590e9..c8b1d5d8f 100644 --- a//security-lake/latest/userguide/doc-history.md +++ b//security-lake/latest/userguide/doc-history.md @@ -12,0 +13 @@ Change| Description| Date +Updated service-linked role permission| Security Lake has updated the [AWSServiceRoleForSecurityLakeResourceManagement](https://docs.aws.amazon.com/security-lake/latest/userguide/AWSServiceRoleForSecurityLakeResourceManagement.html) by replacing `StringLike` with `ArnLike`.| September 25, 2025