AWS Security ChangesHomeSearch

AWS workmail documentation change

Service: workmail · 2025-10-19 · Documentation low

File: workmail/latest/adminguide/update-with-lambda.md

Summary

Updated Lambda resource policy with specific account ID (111122223333), region (us-east-1), and modern policy version (2012-10-17), added JSON formatting

Security assessment

The changes demonstrate proper security configuration for Lambda integration by providing concrete examples of source account restrictions and ARN formatting. While this improves security documentation, there is no indication of patching a specific security vulnerability.

Diff

diff --git a/workmail/latest/adminguide/update-with-lambda.md b/workmail/latest/adminguide/update-with-lambda.md
index 65ec16279..71dc24d88 100644
--- a//workmail/latest/adminguide/update-with-lambda.md
+++ b//workmail/latest/adminguide/update-with-lambda.md
@@ -37,0 +38,6 @@ The `PutRawMessageContent` API ensures that the MIME content of the updated mess
+JSON
+    
+
+****
+    
+    
@@ -40 +46 @@ The `PutRawMessageContent` API ensures that the MIME content of the updated mess
-        "Version": "2008-10-17",
+        "Version":"2012-10-17",		 	 	 
@@ -44 +50,2 @@ The `PutRawMessageContent` API ensures that the MIME content of the updated mess
-                "Principal": {"Service": "workmail.REGION.amazonaws.com"
+                "Principal": {
+                    "Service": "workmail.REGION.amazonaws.com"
@@ -53 +60 @@ The `PutRawMessageContent` API ensures that the MIME content of the updated mess
-                        "aws:SourceAccount": "AWS_ACCOUNT_ID" 
+                        "aws:SourceAccount": "111122223333"
@@ -59 +66 @@ The `PutRawMessageContent` API ensures that the MIME content of the updated mess
-                        "aws:SourceArn": "arn:aws:workmailmessageflow:REGION:AWS_ACCOUNT_ID:message/WORKMAIL_ORGANIZATION_ID/*"
+                        "aws:SourceArn": "arn:aws:workmailmessageflow:us-east-1:111122223333:message/WORKMAIL_ORGANIZATION_ID/*"