AWS opensearch-service documentation change
Summary
Updated example resource ARNs with specific account IDs (111122223333), regions (us-east-2), and resource identifiers. Added JSON formatting markers.
Security assessment
Changes involve replacing placeholder values in IAM policy examples with concrete account IDs and regions. This improves documentation clarity but does not address a specific security vulnerability or introduce new security features.
Diff
diff --git a/opensearch-service/latest/developerguide/aurora-PostgreSQL.md b/opensearch-service/latest/developerguide/aurora-PostgreSQL.md index 2c09a8b30..848707f7a 100644 --- a//opensearch-service/latest/developerguide/aurora-PostgreSQL.md +++ b//opensearch-service/latest/developerguide/aurora-PostgreSQL.md @@ -110,0 +111,6 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the +JSON + + +**** + + @@ -143,3 +149,3 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "arn:aws:ec2:*:account-id:network-interface/*", - "arn:aws:ec2:*:account-id:subnet/*", - "arn:aws:ec2:*:account-id:security-group/*" + "arn:aws:ec2:*:111122223333:network-interface/*", + "arn:aws:ec2:*:111122223333:subnet/*", + "arn:aws:ec2:*:111122223333:security-group/*" @@ -162 +168 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "Resource": "arn:aws:ec2:*:account-id:network-interface/*", + "Resource": "arn:aws:ec2:*:111122223333:network-interface/*", @@ -176 +182 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "arn:aws:rds:region:account-id:db:*" + "arn:aws:rds:us-east-2:111122223333:db:*" @@ -186 +192 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "arn:aws:rds:region:account-id:cluster:DB-id" + "arn:aws:rds:us-east-2:111122223333:cluster:DB-id" @@ -198,2 +204,2 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "arn:aws:rds:region:account-id:cluster:DB-id", - "arn:aws:rds:region:account-id:cluster-snapshot:DB-id*" + "arn:aws:rds:us-east-2:111122223333:cluster:DB-id", + "arn:aws:rds:us-east-2:111122223333:cluster-snapshot:DB-id*" @@ -209,2 +215,2 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "arn:aws:rds:region:account-id:cluster:DB-id", - "arn:aws:rds:region:account-id:cluster-snapshot:DB-id*" + "arn:aws:rds:us-east-2:111122223333:cluster:DB-id", + "arn:aws:rds:us-east-2:111122223333:cluster-snapshot:DB-id*" @@ -222,2 +228,2 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "aws:RequestedRegion": "region", - "aws:ResourceAccount": "account-id" + "aws:RequestedRegion": "us-east-2", + "aws:ResourceAccount": "111122223333" @@ -240 +246 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "arn:aws:kms:region:account-id:key/export-key-id" + "arn:aws:kms:us-east-2:111122223333:key/export-key-id" @@ -248 +254 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "arn:aws:iam::account-id:role/export-role" + "arn:aws:iam::111122223333:role/export-role" @@ -258 +264 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "arn:aws:secretsmanager:*:account-id:secret:*" + "arn:aws:secretsmanager:*:111122223333:secret:*"