AWS Security ChangesHomeSearch

AWS step-functions: Replace region/account placeholders with concrete values in ECS IAM examples

Service: step-functions · 2026-09-27 · Documentation low

File: step-functions/latest/dg/connect-ecs.md · Type: iam

Summary

Substituted generic 'region' and 'account-id' placeholders with us-east-1 and 111122223333 in ECS/EventBridge IAM policy resource ARNs.

Security assessment

Documentation clarity change to IAM policy resource ARNs in Step Functions ECS integration examples; no new security guidance or vulnerability fix.

Evidence

+                    "arn:aws:ecs:us-east-1:111122223333:task-definition/taskDefinition:revisionNumber"

Diff

diff --git a/step-functions/latest/dg/connect-ecs.md b/step-functions/latest/dg/connect-ecs.md
index 78e8c4e1f..7f01182fd 100644
--- a//step-functions/latest/dg/connect-ecs.md
+++ b//step-functions/latest/dg/connect-ecs.md
@@ -142,2 +142 @@ _Static resources_
-                    "arn:aws:ecs:region:
-    account-id:task-definition/taskDefinition:revisionNumber"
+                    "arn:aws:ecs:us-east-1:111122223333:task-definition/taskDefinition:revisionNumber"
@@ -162,2 +161 @@ _Static resources_
-                   "arn:aws:events:region:
-    account-id:rule/StepFunctionsGetEventsForECSTaskRule"
+                   "arn:aws:events:us-east-1:111122223333:rule/StepFunctionsGetEventsForECSTaskRule"
@@ -194,2 +192 @@ _Dynamic resources_
-                   "arn:aws:events:region:
-    account-id:rule/StepFunctionsGetEventsForECSTaskRule"
+                   "arn:aws:events:us-east-1:111122223333:rule/StepFunctionsGetEventsForECSTaskRule"
@@ -216,2 +213 @@ _Static resources_
-                    "arn:aws:ecs:region:
-    account-id:task-definition/taskDefinition:revisionNumber"
+                    "arn:aws:ecs:us-east-1:111122223333:task-definition/taskDefinition:revisionNumber"