AWS cloudsearch documentation change
Summary
Restructured prerequisites section and moved JSON policy example into code block
Security assessment
Formatting changes and content reorganization without introducing new security policies or features. The IAM role requirements and access policies mentioned were already part of the documentation.
Diff
diff --git a/cloudsearch/latest/developerguide/api-gateway.md b/cloudsearch/latest/developerguide/api-gateway.md index 93e3c4e06..fecc47e79 100644 --- a//cloudsearch/latest/developerguide/api-gateway.md +++ b//cloudsearch/latest/developerguide/api-gateway.md @@ -41 +41,2 @@ Prerequisite | Description -Amazon CloudSearch Domain | For testing purposes, the domain should have some searchable data. The IMDb movies data is an excellent option. The domain must have the following access policy: +Amazon CloudSearch Domain | For testing purposes, the domain should have some searchable data. The IMDb movies data is an excellent option. The domain must have the following access policy: This policy configures the Amazon CloudSearch domain so that only API Gateway (and probably the account owner) can access it. To learn more, see [Creating an Amazon CloudSearch Domain](./creating-domains.html) and [Configuring Access for Amazon CloudSearch](./configuring-access.html). +IAM Role | This role delegates permissions to API Gateway and allows it to make requests to Amazon CloudSearch. The role is referred to as ``my-api-gateway-role`` within this chapter and must have the following permissions: @@ -42,0 +44 @@ Amazon CloudSearch Domain | For testing purposes, the domain should have some s +JSON @@ -44,15 +45,0 @@ Amazon CloudSearch Domain | For testing purposes, the domain should have some s - { - "Version": "2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Principal": { - "AWS": "arn:aws:iam::123456789012:role/my-api-gateway-role" - }, - "Action": [ - "cloudsearch:search", - "cloudsearch:suggest" - ] - } - ] - } @@ -60,2 +47,2 @@ Amazon CloudSearch Domain | For testing purposes, the domain should have some s -This policy configures the Amazon CloudSearch domain so that only API Gateway (and probably the account owner) can access it. To learn more, see [Creating an Amazon CloudSearch Domain](./creating-domains.html) and [Configuring Access for Amazon CloudSearch](./configuring-access.html). -IAM Role | This role delegates permissions to API Gateway and allows it to make requests to Amazon CloudSearch. The role is referred to as ``my-api-gateway-role`` within this chapter and must have the following permissions: +**** + @@ -82,0 +71,6 @@ The role must also have the following trust relationship: +JSON + + +**** + +