AWS redshift documentation change
Summary
Updated IAM policy examples to simplify resource ARN formatting, added temporary credentials recommendation with documentation links, and fixed URL paths with double slashes.
Security assessment
The change promotes security best practices by recommending temporary credentials over long-term credentials and updates policy syntax. However, there's no evidence of addressing a specific vulnerability. The added documentation enhances security awareness but doesn't fix an active exploit.
Diff
diff --git a/redshift/latest/mgmt/generating-iam-credentials-steps.md b/redshift/latest/mgmt/generating-iam-credentials-steps.md index bd6ff2edf..f3ac6443a 100644 --- a//redshift/latest/mgmt/generating-iam-credentials-steps.md +++ b//redshift/latest/mgmt/generating-iam-credentials-steps.md @@ -102,0 +103,6 @@ Your SQL client needs authorization to call the the ` GetClusterCredentialsWithI +JSON + + +**** + + @@ -110,3 +116 @@ Your SQL client needs authorization to call the the ` GetClusterCredentialsWithI - "Resource": [ - "arn:aws:redshift:us-east-1:123456789012:dbname:testcluster/testdatabase" - ] + "Resource": "arn:aws:redshift:us-east-1:123456789012:dbname:testcluster/testdatabase" @@ -118 +122 @@ Your SQL client needs authorization to call the the ` GetClusterCredentialsWithI - "Resource": "arn:aws:redshift:us-east-1:123456789012:dbname:examplecluster/*", + "Resource": "arn:aws:redshift:us-east-1:123456789012:dbname:examplecluster/*" @@ -176,0 +182,3 @@ Which user needs programmatic access? | To | By +IAM | (Recommended) Use console credentials as temporary credentials to sign programmatic requests to the AWS CLI, AWS SDKs, or AWS APIs. | Following the instructions for the interface that you want to use. + * For the AWS CLI, see [Login for AWS local development](https://docs.aws.amazon.com//cli/latest/userguide/cli-configure-sign-in.html) in the _AWS Command Line Interface User Guide_. + * For AWS SDKs, see [Login for AWS local development](https://docs.aws.amazon.com//sdkref/latest/guide/access-login.html) in the _AWS SDKs and Tools Reference Guide_. @@ -178,2 +186,2 @@ Workforce identity (Users managed in IAM Identity Center) | Use temporary creden - * For the AWS CLI, see [Configuring the AWS CLI to use AWS IAM Identity Center](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html) in the _AWS Command Line Interface User Guide_. - * For AWS SDKs, tools, and AWS APIs, see [IAM Identity Center authentication](https://docs.aws.amazon.com/sdkref/latest/guide/access-sso.html) in the _AWS SDKs and Tools Reference Guide_. + * For the AWS CLI, see [Configuring the AWS CLI to use AWS IAM Identity Center](https://docs.aws.amazon.com//cli/latest/userguide/cli-configure-sso.html) in the _AWS Command Line Interface User Guide_. + * For AWS SDKs, tools, and AWS APIs, see [IAM Identity Center authentication](https://docs.aws.amazon.com//sdkref/latest/guide/access-sso.html) in the _AWS SDKs and Tools Reference Guide_. @@ -182,3 +190,3 @@ IAM | (Not recommended)Use long-term credentials to sign programmatic requests t - * For the AWS CLI, see [Authenticating using IAM user credentials](https://docs.aws.amazon.com/cli/latest/userguide/cli-authentication-user.html) in the _AWS Command Line Interface User Guide_. - * For AWS SDKs and tools, see [Authenticate using long-term credentials](https://docs.aws.amazon.com/sdkref/latest/guide/access-iam-users.html) in the _AWS SDKs and Tools Reference Guide_. - * For AWS APIs, see [Managing access keys for IAM users](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html) in the _IAM User Guide_. + * For the AWS CLI, see [Authenticating using IAM user credentials](https://docs.aws.amazon.com//cli/latest/userguide/cli-authentication-user.html) in the _AWS Command Line Interface User Guide_. + * For AWS SDKs and tools, see [Authenticate using long-term credentials](https://docs.aws.amazon.com//sdkref/latest/guide/access-iam-users.html) in the _AWS SDKs and Tools Reference Guide_. + * For AWS APIs, see [Managing access keys for IAM users](https://docs.aws.amazon.com//IAM/latest/UserGuide/id_credentials_access-keys.html) in the _IAM User Guide_.