AWS AmazonECR documentation change
Summary
Added JSON policy example and concrete account ID in replication policy
Security assessment
Provides clearer policy example for replication configuration, but does not address a specific security vulnerability
Diff
diff --git a/AmazonECR/latest/userguide/replication.md b/AmazonECR/latest/userguide/replication.md index c854070f7..39654f0a6 100644 --- a//AmazonECR/latest/userguide/replication.md +++ b//AmazonECR/latest/userguide/replication.md @@ -57,0 +58,6 @@ Example destination registry policy: +JSON + + +**** + + @@ -66 +72 @@ Example destination registry policy: - "AWS": "arn:aws:iam::SOURCE-ACCOUNT-ID:root" + "AWS": "arn:aws:iam::111122223333:root" @@ -71 +77,2 @@ Example destination registry policy: - ] + ], + "Resource": "*"