AWS vm-import medium security documentation change

Service: vm-import · 2026-05-10 · Security-related medium

File: vm-import/latest/userguide/required-permissions.md

Summary

Changed IAM resource ARN from wildcard (*) to specific account ID (111122223333) in policy example

Security assessment

Fixes overly permissive wildcard resource in IAM policy example, enforcing least privilege principle. This addresses potential privilege escalation risks.

Diff

diff --git a/vm-import/latest/userguide/required-permissions.md b/vm-import/latest/userguide/required-permissions.md
index 2cb941a2e..e7d46427a 100644
--- a//vm-import/latest/userguide/required-permissions.md
+++ b//vm-import/latest/userguide/required-permissions.md
@@ -91 +91 @@ JSON
-          "Resource": "arn:aws:iam::*:role/vmimport"
+          "Resource": "arn:aws:iam::111122223333:role/vmimport"