AWS Security ChangesHomeSearch

AWS opensearch-service: Use concrete ARN in Prometheus workspace policy example

Service: opensearch-service · 2026-10-08 · Documentation low

File: opensearch-service/latest/developerguide/configure-client-prometheus.md

Summary

The Amazon Managed Prometheus workspace resource ARN now uses us-east-1 and 111122223333 instead of region/account-id placeholders.

Security assessment

Placeholder substitution in an IAM policy sample; permissions and scope are unchanged.

Evidence

          "Resource": "arn:aws:aps:us-east-1:111122223333:workspace/workspace-id"

Diff

diff --git a/opensearch-service/latest/developerguide/configure-client-prometheus.md b/opensearch-service/latest/developerguide/configure-client-prometheus.md
index a203031..0208dbb 100644
--- a//opensearch-service/latest/developerguide/configure-client-prometheus.md
+++ b//opensearch-service/latest/developerguide/configure-client-prometheus.md
@@ -70 +70 @@ The following sample policy shows the required permissions for using Amazon Mana
-          "Resource": "arn:aws:aps:region:account-id:workspace/workspace-id"
+          "Resource": "arn:aws:aps:us-east-1:111122223333:workspace/workspace-id"