AWS timestream documentation change

Service: timestream · 2025-11-25 · Documentation low

File: timestream/latest/developerguide/timestream-for-influx-security-db-secrets.md

Summary

Added detailed IAM policy examples for Secrets Manager integration and database instance access control

Security assessment

The changes provide security documentation for secret management and resource access control, but do not indicate remediation of a specific security vulnerability

Diff

diff --git a/timestream/latest/developerguide/timestream-for-influx-security-db-secrets.md b/timestream/latest/developerguide/timestream-for-influx-security-db-secrets.md
index 8292f1b5c..6c9459bbb 100644
--- a//timestream/latest/developerguide/timestream-for-influx-security-db-secrets.md
+++ b//timestream/latest/developerguide/timestream-for-influx-security-db-secrets.md
@@ -112,0 +113,38 @@ Replace all items listed below in the IAM policy with values from your AWS accou
+JSON
+    
+
+****
+    
+    
+    
+    {
+        "Version":"2012-10-17",		 	 	 
+        "Statement": [
+            {
+                "Effect": "Allow",
+                "Action": [
+                    "secretsmanager:DescribeSecret",
+                    "secretsmanager:GetSecretValue",
+                    "secretsmanager:PutSecretValue",
+                    "secretsmanager:UpdateSecretVersionStage"
+                ],
+                "Resource": "arn:aws:secretsmanager:us-east-2:111122223333:secret:MySecret"
+            },
+            {
+                "Effect": "Allow",
+                "Action": [
+                    "secretsmanager:GetRandomPassword"
+                ],
+                "Resource": "*"
+            },
+            {
+                "Action": [
+                    "timestream-influxdb:GetDbInstance"
+                ],
+                "Resource": "arn:aws:timestream-influxdb:us-east-2:111122223333:db-instance/MyDbInstance",
+                "Effect": "Allow"
+            }
+        ]
+    }
+    
+
@@ -137,0 +176,45 @@ Replace all items listed below in the IAM policy with values from your AWS accou
+JSON
+    
+
+****
+    
+    
+    
+    {
+        "Version":"2012-10-17",		 	 	 
+        "Statement": [
+            {
+                "Effect": "Allow",
+                "Action": [
+                    "secretsmanager:DescribeSecret",
+                    "secretsmanager:GetSecretValue",
+                    "secretsmanager:PutSecretValue",
+                    "secretsmanager:UpdateSecretVersionStage"
+                ],
+    	        "Resource": "arn:aws:secretsmanager:us-east-2:111122223333:secret:MySecret"
+            },
+            {
+                "Effect": "Allow",
+                "Action": [
+                    "secretsmanager:GetSecretValue"
+                ],
+    	        "Resource": "arn:aws:secretsmanager:us-east-2:111122223333:secret:MyAdminSecret"
+            },
+            {
+                "Effect": "Allow",
+                "Action": [
+                    "secretsmanager:GetRandomPassword"
+                ],
+                "Resource": "*"
+            },
+            {
+                "Action": [
+                    "timestream-influxdb:GetDbInstance"
+                ],
+    	        "Resource": "arn:aws:timestream-influxdb:us-east-2:111122223333:db-instance/MyDbInstance",
+                "Effect": "Allow"
+            }
+        ]
+    }
+    
+