AWS step-functions: Replace region/account placeholders with concrete values in ECS IAM examples
Summary
Substituted generic 'region' and 'account-id' placeholders with us-east-1 and 111122223333 in ECS/EventBridge IAM policy resource ARNs.
Security assessment
Documentation clarity change to IAM policy resource ARNs in Step Functions ECS integration examples; no new security guidance or vulnerability fix.
Evidence
+ "arn:aws:ecs:us-east-1:111122223333:task-definition/taskDefinition:revisionNumber"
Diff
diff --git a/step-functions/latest/dg/connect-ecs.md b/step-functions/latest/dg/connect-ecs.md index 78e8c4e1f..7f01182fd 100644 --- a//step-functions/latest/dg/connect-ecs.md +++ b//step-functions/latest/dg/connect-ecs.md @@ -142,2 +142 @@ _Static resources_ - "arn:aws:ecs:region: - account-id:task-definition/taskDefinition:revisionNumber" + "arn:aws:ecs:us-east-1:111122223333:task-definition/taskDefinition:revisionNumber" @@ -162,2 +161 @@ _Static resources_ - "arn:aws:events:region: - account-id:rule/StepFunctionsGetEventsForECSTaskRule" + "arn:aws:events:us-east-1:111122223333:rule/StepFunctionsGetEventsForECSTaskRule" @@ -194,2 +192 @@ _Dynamic resources_ - "arn:aws:events:region: - account-id:rule/StepFunctionsGetEventsForECSTaskRule" + "arn:aws:events:us-east-1:111122223333:rule/StepFunctionsGetEventsForECSTaskRule" @@ -216,2 +213 @@ _Static resources_ - "arn:aws:ecs:region: - account-id:task-definition/taskDefinition:revisionNumber" + "arn:aws:ecs:us-east-1:111122223333:task-definition/taskDefinition:revisionNumber"