AWS SchemaConversionTool documentation change
Summary
Updated IAM role ARNs with concrete account numbers and added JSON policy structure markers
Security assessment
Replacing placeholder values (ACCOUNT_NUMBER) with examples reduces misconfiguration risk, but does not address an active security vulnerability.
Diff
diff --git a/SchemaConversionTool/latest/userguide/CHAP_Source.Oozie.md b/SchemaConversionTool/latest/userguide/CHAP_Source.Oozie.md index f481fc5c0..381c16f66 100644 --- a//SchemaConversionTool/latest/userguide/CHAP_Source.Oozie.md +++ b//SchemaConversionTool/latest/userguide/CHAP_Source.Oozie.md @@ -89,0 +90,6 @@ To use this extension pack, create an AWS Identity and Access Management (IAM) r +JSON + + +**** + + @@ -130,0 +138,6 @@ To apply the extension pack, AWS SCT requires an IAM role with the following per +JSON + + +**** + + @@ -148 +161 @@ To apply the extension pack, AWS SCT requires an IAM role with the following per - "arn:aws:iam::ACCOUNT_NUMBER:role/sct/*" + "arn:aws:iam::111122223333:role/sct/*" @@ -158,3 +171,3 @@ To apply the extension pack, AWS SCT requires an IAM role with the following per - "arn:aws:iam::ACCOUNT_NUMBER:role/lambda_LoadParameterInitialStateRole", - "arn:aws:iam::ACCOUNT_NUMBER:role/lambda_EvaluateJSPELExpressionsRole", - "arn:aws:iam::ACCOUNT_NUMBER:role/stepFunctions_MigratedOozieWorkflowRole" + "arn:aws:iam::111122223333:role/lambda_LoadParameterInitialStateRole", + "arn:aws:iam::111122223333:role/lambda_EvaluateJSPELExpressionsRole", + "arn:aws:iam::111122223333:role/stepFunctions_MigratedOozieWorkflowRole" @@ -172,2 +185,2 @@ To apply the extension pack, AWS SCT requires an IAM role with the following per - "arn:aws:lambda:*:ACCOUNT_NUMBER:function:LoadParameterInitialState", - "arn:aws:lambda:*:ACCOUNT_NUMBER:function:EvaluateJSPELExpressions" + "arn:aws:lambda:*:111122223333:function:LoadParameterInitialState", + "arn:aws:lambda:*:111122223333:function:EvaluateJSPELExpressions"