AWS opensearch-service: Use concrete ARN in Prometheus workspace policy example
Summary
The Amazon Managed Prometheus workspace resource ARN now uses us-east-1 and 111122223333 instead of region/account-id placeholders.
Security assessment
Placeholder substitution in an IAM policy sample; permissions and scope are unchanged.
Evidence
"Resource": "arn:aws:aps:us-east-1:111122223333:workspace/workspace-id"
Diff
diff --git a/opensearch-service/latest/developerguide/configure-client-prometheus.md b/opensearch-service/latest/developerguide/configure-client-prometheus.md index a203031..0208dbb 100644 --- a//opensearch-service/latest/developerguide/configure-client-prometheus.md +++ b//opensearch-service/latest/developerguide/configure-client-prometheus.md @@ -70 +70 @@ The following sample policy shows the required permissions for using Amazon Mana - "Resource": "arn:aws:aps:region:account-id:workspace/workspace-id" + "Resource": "arn:aws:aps:us-east-1:111122223333:workspace/workspace-id"