AWS prescriptive-guidance documentation change

Service: prescriptive-guidance · 2026-07-10 · Documentation low

File: prescriptive-guidance/latest/certificate-based-access-controls/appendix-sample-policies.md

Summary

Updated title and replaced specific example bucket ARNs with generic 'DOC-EXAMPLE-BUCKET' placeholder

Security assessment

Change replaces demo bucket names with standard placeholder for documentation consistency. No security vulnerability is addressed; this is a routine documentation improvement to avoid using example names that might resemble real resources.

Diff

diff --git a/prescriptive-guidance/latest/certificate-based-access-controls/appendix-sample-policies.md b/prescriptive-guidance/latest/certificate-based-access-controls/appendix-sample-policies.md
index 55078b136..76bb68604 100644
--- a//prescriptive-guidance/latest/certificate-based-access-controls/appendix-sample-policies.md
+++ b//prescriptive-guidance/latest/certificate-based-access-controls/appendix-sample-policies.md
@@ -9 +9 @@ Sample policies for Application 1Sample policies for Application 2
-# Appendix: Sample policies
+# Appendix: Sample profile and role policies
@@ -28,2 +28,2 @@ The sample policy for **Profile 1** allows some actions for **Bucket 1** in Amaz
-                    "arn:aws:s3:::amzn-s3-demo-bucket1",
-                    "arn:aws:s3:::amzn-s3-demo-bucket1/*"
+                    "arn:aws:s3:::DOC-EXAMPLE-BUCKET",
+                    "arn:aws:s3:::DOC-EXAMPLE-BUCKET/*"
@@ -64,4 +64,4 @@ The sample policy for **Role 1** allows the `DescribeInstances` action for an Am
-                    "arn:aws:s3:::amzn-s3-demo-bucket1",
-                    "arn:aws:s3:::amzn-s3-demo-bucket1/*",
-                    "arn:aws:s3:::amzn-s3-demo-bucket2",
-                    "arn:aws:s3:::amzn-s3-demo-bucket2/*"
+                    "arn:aws:s3:::DOC-EXAMPLE-BUCKET",
+                    "arn:aws:s3:::DOC-EXAMPLE-BUCKET/*",
+                    "arn:aws:s3:::DOC-EXAMPLE-BUCKET",
+                    "arn:aws:s3:::DOC-EXAMPLE-BUCKET/*"
@@ -92,2 +92,2 @@ The sample policy for **Profile 2** allows some actions for **Bucket 2** in Amaz
-                    "arn:aws:s3:::amzn-s3-demo-bucket2",
-                    "arn:aws:s3:::amzn-s3-demo-bucket2/*"
+                    "arn:aws:s3:::DOC-EXAMPLE-BUCKET",
+                    "arn:aws:s3:::DOC-EXAMPLE-BUCKET/*"
@@ -128,4 +128,4 @@ The sample policy for **Role 2** allows the `DescribeInstances` action for an Am
-                    "arn:aws:s3:::amzn-s3-demo-bucket1",
-                    "arn:aws:s3:::amzn-s3-demo-bucket1/*",
-                    "arn:aws:s3:::amzn-s3-demo-bucket2",
-                    "arn:aws:s3:::amzn-s3-demo-bucket2/*"
+                    "arn:aws:s3:::DOC-EXAMPLE-BUCKET",
+                    "arn:aws:s3:::DOC-EXAMPLE-BUCKET/*",
+                    "arn:aws:s3:::DOC-EXAMPLE-BUCKET",
+                    "arn:aws:s3:::DOC-EXAMPLE-BUCKET/*"