AWS comprehend documentation change

Service: comprehend · 2025-10-25 · Documentation low

File: comprehend/latest/dg/security_iam_id-based-policy-examples.md

Summary

Added JSON formatting markers and updated S3 endpoint region specificity in KMS encryption policy

Security assessment

Formatting changes and regional endpoint specification improve clarity but do not introduce security fixes. The S3 endpoint change from wildcard to us-east-1 reduces scope but isn't explicitly tied to a disclosed vulnerability.

Diff

diff --git a/comprehend/latest/dg/security_iam_id-based-policy-examples.md b/comprehend/latest/dg/security_iam_id-based-policy-examples.md
index 404f198a5..d529b2f01 100644
--- a//comprehend/latest/dg/security_iam_id-based-policy-examples.md
+++ b//comprehend/latest/dg/security_iam_id-based-policy-examples.md
@@ -68,0 +69,6 @@ To use the Amazon Comprehend console, you also need permissions for the actions
+JSON
+    
+
+****
+    
+    
@@ -97,0 +105,6 @@ When you create an asynchronous batch job or a topic modeling job using the cons
+JSON
+    
+
+****
+    
+    
@@ -172,0 +187,6 @@ The following example policy grants permissions to use the Amazon Comprehend doc
+JSON
+    
+
+****
+    
+    
@@ -206,0 +228,6 @@ To fully use Amazon Key Management Service (KMS) for data and job encryption in
+JSON
+    
+
+****
+    
+    
@@ -228 +255 @@ To fully use Amazon Key Management Service (KMS) for data and job encryption in
-                        "s3.region.amazonaws.com"
+                            "s3.us-east-1.amazonaws.com"
@@ -256,0 +285,6 @@ You need to apply the following additional policy to any user that will use Amaz
+JSON
+    
+
+****
+    
+    
@@ -284,0 +320,6 @@ The following shows an example trust policy for the role that you create. To hel
+JSON
+    
+
+****
+    
+    
@@ -314,0 +357,6 @@ You might choose to create a user who has permissions for all Amazon Comprehend
+JSON
+    
+
+****
+    
+    
@@ -365,0 +415,6 @@ The following permissions policy grants user permissions to perform the Amazon C
+JSON
+    
+
+****
+    
+    
@@ -369 +424,2 @@ The following permissions policy grants user permissions to perform the Amazon C
-      "Statement": [{
+        "Statement": [
+            {
@@ -375 +431 @@ The following permissions policy grants user permissions to perform the Amazon C
-                "comprehend:StartTopicsDetectionJob",
+                    "comprehend:StartTopicsDetectionJob"
@@ -378 +433,0 @@ The following permissions policy grants user permissions to perform the Amazon C
-            ]