AWS opensearch-service: Replace placeholders in network access policy examples
Summary
VPC endpoint, VPC, and application ARN placeholders were replaced with concrete sample values (vpce-1234567890abcdef0, vpc-1234567890abcdef0, us-east-1/111122223333).
Security assessment
These are illustrative condition keys and ARNs in deny/allow policy examples; the security logic (SourceVpce/SourceVpc conditions) is unchanged, only placeholder text was made concrete.
Evidence
"aws:SourceVpce": "vpce-1234567890abcdef0"
Diff
diff --git a/opensearch-service/latest/developerguide/application-network-access-reference.md b/opensearch-service/latest/developerguide/application-network-access-reference.md index 891c4e1..b3ff147 100644 --- a//opensearch-service/latest/developerguide/application-network-access-reference.md +++ b//opensearch-service/latest/developerguide/application-network-access-reference.md @@ -60 +60 @@ The following identity-based policy denies a user or role access to OpenSearch U - "aws:SourceVpce": "vpc-endpoint-id" + "aws:SourceVpce": "vpce-1234567890abcdef0" @@ -151 +151 @@ An identity-based policy governs a specific principal. To control which applicat - "Resource": "arn:aws:opensearch:region:account-id:application/application-id" + "Resource": "arn:aws:opensearch:us-east-1:111122223333:application/application-id" @@ -191 +191 @@ The following resource control policy denies all access to OpenSearch UI applica - "aws:SourceVpce": "vpc-endpoint-id" + "aws:SourceVpce": "vpce-1234567890abcdef0" @@ -245 +245 @@ To approve every interface VPC endpoint in a VPC instead of naming one endpoint, - "aws:SourceVpc": "vpc-id" + "aws:SourceVpc": "vpc-1234567890abcdef0"