AWS opensearch-service: Replace placeholder account ID in SAML access policy example
Summary
The example access policy ARN now uses a concrete account ID (111122223333) instead of the generic 12345678901 placeholder.
Security assessment
Only a placeholder account ID was swapped for a sample value; the policy semantics (including the pre-existing wildcard Principal) are unchanged, so this is a cosmetic documentation edit.
Evidence
--access-policies '{"Version": "2012-10-17","Statement":[{"Effect":"Allow","Principal":{"AWS":"*"},"Action":"es:*","Resource":"arn:aws:es:us-east-1:111122223333:domain/neosaml10/*"}]}' \
Diff
diff --git a/opensearch-service/latest/developerguide/application-enable-SAML-identity-federation.md b/opensearch-service/latest/developerguide/application-enable-SAML-identity-federation.md index bacbb8e..ccb6510 100644 --- a//opensearch-service/latest/developerguide/application-enable-SAML-identity-federation.md +++ b//opensearch-service/latest/developerguide/application-enable-SAML-identity-federation.md @@ -543 +543 @@ You can also configure fine-grained access control using the AWS CLI. - --access-policies '{"Version": "2012-10-17","Statement":[{"Effect":"Allow","Principal":{"AWS":"*"},"Action":"es:*","Resource":"arn:aws:es:us-east-1:12345678901:domain/neosaml10/*"}]}' \ + --access-policies '{"Version": "2012-10-17","Statement":[{"Effect":"Allow","Principal":{"AWS":"*"},"Action":"es:*","Resource":"arn:aws:es:us-east-1:111122223333:domain/neosaml10/*"}]}' \