AWS sap documentation change
Summary
Updated example ARNs for EC2 instances and route tables in IAM policy examples
Security assessment
Changes replace placeholder values with concrete example ARNs but do not introduce new security controls or address vulnerabilities. Updates clarify resource identifiers in existing security policies.
Diff
diff --git a/sap/latest/sap-netweaver/rhel-netweaver-ha-settings.md b/sap/latest/sap-netweaver/rhel-netweaver-ha-settings.md index d876bdd34..947c5678f 100644 --- a//sap/latest/sap-netweaver/rhel-netweaver-ha-settings.md +++ b//sap/latest/sap-netweaver/rhel-netweaver-ha-settings.md @@ -175,2 +175,2 @@ The RHEL STONITH agent requires permission to start and stop both the nodes of t - "arn:aws:ec2:<region>:<account_id>:instance/<instance_id_1>", - "arn:aws:ec2:<region>:<account_id>:instance/<instance_id_2>" + "arn:aws:ec2:us-east-1:123456789012:instance/arn:aws:ec2:us-east-1:123456789012:instance/i-1234567890abcdef0", + "arn:aws:ec2:us-east-1:123456789012:instance/arn:aws:ec2:us-east-1:123456789012:instance/i-1234567890abcdef0" @@ -194,2 +194,2 @@ The RHEL Overlay IP resource agent (`aws-vpc-move-ip`) requires permission to mo - "arn:aws:ec2:<region>:<account_id>:route-table/<rtb_id_1>", - "arn:aws:ec2:<region>:<account_id>:route-table/<rtb_id_2>" + "arn:aws:ec2:us-east-1:123456789012:route-table/rtb-0123456789abcdef0", + "arn:aws:ec2:us-east-1:123456789012:route-table/rtb-0123456789abcdef0" @@ -711,2 +711,2 @@ After the IAM role has been created, create the following IAM policy on the shar - "arn:aws:ec2:<region>:<sharing_vpc_account_id>:route_table/<rtb_id_1>", - "arn:aws:ec2:<region>:<sharing_vpc_account_id>:route_table/<rtb_id_2>" + "arn:aws:ec2:us-east-1:123456789012:route-table/rtb-0123456789abcdef0", + "arn:aws:ec2:us-east-1:123456789012:route-table/rtb-0123456789abcdef0" @@ -740 +740 @@ In cluster account, create the following IAM policy, and attach it to an IAM rol - "Resource": "arn:aws:iam::<sharing_vpc_account_id>:role/<sharing _vpc-account-cluster-role>" + "Resource": "arn:aws:iam::123456789012:role/sharing-vpc-account-cluster-role" @@ -759,2 +759,2 @@ In cluster account, create the following IAM policy, and attach it to an IAM rol - "arn:aws:ec2:<region>:<cluster_account_id>:instance/<instance_id_1>", - "arn:aws:ec2:<region>:<cluster_account_id>:instance/<instance_id_2>" + "arn:aws:ec2:us-east-1:123456789012:instance/arn:aws:ec2:us-east-1:123456789012:instance/i-1234567890abcdef0", + "arn:aws:ec2:us-east-1:123456789012:instance/arn:aws:ec2:us-east-1:123456789012:instance/i-1234567890abcdef0" @@ -769,0 +770 @@ In cluster account, create the following IAM policy, and attach it to an IAM rol + }