AWS res medium security documentation change
Summary
Updated IAM policy example for cross-account S3 access with corrected role name and placeholder formatting
Security assessment
This change corrects an IAM role ARN in a cross-account access policy example. The previous role name '<ENVIRONMENT_NAME>-custom-credential-broker-lambda-role-us-east-1' was changed to '<ENVIRONMENT_NAME>-vdc-custom-credential-broker-lambda-role'. This is security-related because incorrect IAM role references in cross-account policies could lead to authorization failures or unintended access. The change ensures the documentation accurately reflects the required IAM role for secure cross-account S3 access.
Diff
diff --git a/res/archive/release-minus-4/ug/S3-buckets-cross-account-access.md b/res/archive/release-minus-4/ug/S3-buckets-cross-account-access.md index a893605e9..4aaafccd3 100644 --- a//res/archive/release-minus-4/ug/S3-buckets-cross-account-access.md +++ b//res/archive/release-minus-4/ug/S3-buckets-cross-account-access.md @@ -76 +76 @@ JSON - 3. Paste the following JSON policy (replace ``111122223333`` with the actual account ID of Account A, ``<ENVIRONMENT_NAME>`` with the environment name of the RES deployment, and ``us-east-1`` with the AWS region RES is deployed to): + 3. Paste the following JSON policy (replace ``111122223333`` with the actual account ID of Account A, ``ENVIRONMENT_NAME`` with the environment name of the RES deployment, and ``us-east-1`` with the AWS region RES is deployed to): @@ -90 +90 @@ JSON - "AWS": "arn:aws:iam::111122223333:role/<ENVIRONMENT_NAME>-custom-credential-broker-lambda-role-us-east-1" + "AWS": "arn:aws:iam::111122223333:role/<ENVIRONMENT_NAME>-vdc-custom-credential-broker-lambda-role"