AWS detective documentation change
Summary
Updated IAM policy examples with specific resource ARNs and formatting
Security assessment
Changes involve replacing placeholders with concrete ARNs and code formatting. No direct security issue or new security feature is introduced.
Diff
diff --git a/detective/latest/userguide/iam-permissions.md b/detective/latest/userguide/iam-permissions.md index d13e6f186..073dead1d 100644 --- a//detective/latest/userguide/iam-permissions.md +++ b//detective/latest/userguide/iam-permissions.md @@ -14,0 +15,6 @@ If you do not have the required permissions to attach this policy to your IAM id +JSON + + +**** + + @@ -35,2 +41,2 @@ If you do not have the required permissions to attach this policy to your IAM id - "arn:aws:s3:::<athena-results-bucket>", - "arn:aws:s3:::<athena-results-bucket>/*" + "arn:aws:s3:::amzn-s3-demo-bucket", + "arn:aws:s3:::amzn-s3-demo-bucket/*" @@ -48,3 +54,3 @@ If you do not have the required permissions to attach this policy to your IAM id - "arn:aws:glue:*:<ACCOUNT ID>:database/amazon_security_lake*", - "arn:aws:glue:*:<ACCOUNT ID>:table/amazon_security_lake*/amazon_security_lake*", - "arn:aws:glue:*:<ACCOUNT ID>:catalog" + "arn:aws:glue:*:123456789012:database/amazon_security_lake*", + "arn:aws:glue:*:123456789012:table/amazon_security_lake*/amazon_security_lake*", + "arn:aws:glue:*:123456789012:catalog" @@ -75 +81 @@ If you do not have the required permissions to attach this policy to your IAM id - "arn:aws:ssm:*:<ACCOUNT ID>:parameter/Detective/SLI" + "arn:aws:ssm:*:123456789012:parameter/Detective/SLI"