AWS opensearch-service documentation change
Summary
Updated example resource ARNs with specific account IDs (111122223333), regions (us-east-2), and resource identifiers. Added JSON formatting markers.
Security assessment
Similar to the PostgreSQL counterpart, these changes standardize example policies but do not indicate a security fix or new security capability.
Diff
diff --git a/opensearch-service/latest/developerguide/aurora-mysql.md b/opensearch-service/latest/developerguide/aurora-mysql.md index 2c6439cf9..82b16ff44 100644 --- a//opensearch-service/latest/developerguide/aurora-mysql.md +++ b//opensearch-service/latest/developerguide/aurora-mysql.md @@ -115,0 +116,6 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the +JSON + + +**** + + @@ -148,3 +154,3 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "arn:aws:ec2:*:account-id:network-interface/*", - "arn:aws:ec2:*:account-id:subnet/*", - "arn:aws:ec2:*:account-id:security-group/*" + "arn:aws:ec2:*:111122223333:network-interface/*", + "arn:aws:ec2:*:111122223333:subnet/*", + "arn:aws:ec2:*:111122223333:security-group/*" @@ -167 +173 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "Resource": "arn:aws:ec2:*:account-id:network-interface/*", + "Resource": "arn:aws:ec2:*:111122223333:network-interface/*", @@ -181 +187 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "arn:aws:rds:region:account-id:db:*" + "arn:aws:rds:us-east-2:111122223333:db:*" @@ -191 +197 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "arn:aws:rds:region:account-id:cluster:DB-id" + "arn:aws:rds:us-east-2:111122223333:cluster:DB-id" @@ -203,2 +209,2 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "arn:aws:rds:region:account-id:cluster:DB-id", - "arn:aws:rds:region:account-id:cluster-snapshot:DB-id*" + "arn:aws:rds:us-east-2:111122223333:cluster:DB-id", + "arn:aws:rds:us-east-2:111122223333:cluster-snapshot:DB-id*" @@ -214,2 +220,2 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "arn:aws:rds:region:account-id:cluster:DB-id", - "arn:aws:rds:region:account-id:cluster-snapshot:DB-id*" + "arn:aws:rds:us-east-2:111122223333:cluster:DB-id", + "arn:aws:rds:us-east-2:111122223333:cluster-snapshot:DB-id*" @@ -227,2 +233,2 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "aws:RequestedRegion": "region", - "aws:ResourceAccount": "account-id" + "aws:RequestedRegion": "us-east-2", + "aws:ResourceAccount": "111122223333" @@ -245 +251 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "arn:aws:kms:region:account-id:key/export-key-id" + "arn:aws:kms:us-east-2:111122223333:key/export-key-id" @@ -253 +259 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "arn:aws:iam::account-id:role/export-role" + "arn:aws:iam::111122223333:role/export-role" @@ -263 +269 @@ After you have your Amazon Aurora pipeline prerequisites set up, [configure the - "arn:aws:secretsmanager:*:account-id:secret:*" + "arn:aws:secretsmanager:*:111122223333:secret:*"