Commitcff6e1a

authored

Merge pull requestsegmentio#5137 from segmentio/fix-entire-role-account-in-aws-policy

[STRATCONN-2814]: Fix role policies for AWS destinations

2 parentsf4b58c1 +d3c237c commitcff6e1aCopy full SHA for cff6e1a

File tree

-9

lines changed

-9

lines changed

Lines changed: 3 additions & 3 deletions

Original file line number	Diff line number	Diff line change
`@@ -144,7 +144,7 @@ To attach multiple sources to your IAM role:`
`144`	`144`	`{`
`145`	`145`	`"Effect":"Allow",`
`146`	`146`	`"Principal": {`
`147`		`-"AWS":"arn:aws:iam::595280932656:root"`
	`147`	`+"AWS":"arn:aws:iam::595280932656:role/customer-firehose-access"`
`148`	`148`	`},`
`149`	`149`	`"Action":"sts:AssumeRole",`
`150`	`150`	`"Condition": {`
`@@ -166,7 +166,7 @@ To attach multiple sources to your IAM role:`
`166`	`166`	`{`
`167`	`167`	`"Effect":"Allow",`
`168`	`168`	`"Principal": {`
`169`		`-"AWS":"arn:aws:iam::595280932656:root"`
	`169`	`+"AWS":"arn:aws:iam::595280932656:role/customer-firehose-access"`
`170`	`170`	`},`
`171`	`171`	`"Action":"sts:AssumeRole",`
`172`	`172`	`"Condition": {`
`@@ -198,7 +198,7 @@ To set this value for a Secret ID:`
`198`	`198`	`{`
`199`	`199`	`"Effect":"Allow",`
`200`	`200`	`"Principal": {`
`201`		`-"AWS":"arn:aws:iam::595280932656:root"`
	`201`	`+"AWS":"arn:aws:iam::595280932656:role/customer-firehose-access"`
`202`	`202`	`},`
`203`	`203`	`"Action":"sts:AssumeRole",`
`204`	`204`	`"Condition": {`

Lines changed: 3 additions & 3 deletions

Original file line number	Diff line number	Diff line change
`@@ -155,7 +155,7 @@ To attach multiple sources to your IAM role:`
`155`	`155`	`{`
`156`	`156`	`"Effect":"Allow",`
`157`	`157`	`"Principal": {`
`158`		`-"AWS":"arn:aws:iam::595280932656:root"`
	`158`	`+"AWS":"arn:aws:iam::595280932656:role/customer-kinesis-access"`
`159`	`159`	`},`
`160`	`160`	`"Action":"sts:AssumeRole",`
`161`	`161`	`"Condition": {`
`@@ -175,7 +175,7 @@ To attach multiple sources to your IAM role:`
`175`	`175`	`{`
`176`	`176`	`"Effect":"Allow",`
`177`	`177`	`"Principal": {`
`178`		`-"AWS":"arn:aws:iam::595280932656:root"`
	`178`	`+"AWS":"arn:aws:iam::595280932656:role/customer-kinesis-access"`
`179`	`179`	`},`
`180`	`180`	`"Action":"sts:AssumeRole",`
`181`	`181`	`"Condition": {`
`@@ -228,7 +228,7 @@ If you have many sources using Kinesis that it's impractical to attach all of th`
`228`	`228`	`{`
`229`	`229`	`"Effect":"Allow",`
`230`	`230`	`"Principal": {`
`231`		`-"AWS":"arn:aws:iam::595280932656:root"`
	`231`	`+"AWS":"arn:aws:iam::595280932656:role/customer-kinesis-access"`
`232`	`232`	`},`
`233`	`233`	`"Action":"sts:AssumeRole",`
`234`	`234`	`"Condition": {`

Lines changed: 2 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -146,7 +146,7 @@ To create an IAM role:`
`146`	`146`	`![A screenshot of the AWS IAM home summary, with the Trust relationships tab selected.](images/LambdaTrustRelationship.png)`
`147`	`147`
`148`	`148`	7. Copy and paste the following code into your trust relationship. You should replace`<your-source-id>` with either the Source ID of the attached Segment source (the default) or the External ID set in your AWS Lambda destination settings.
`149`		-*`arn:aws:iam::595280932656:root` refers to Segment's AWS Account, and is what allows Segment's Destination to access the role to invoke your Lambda.
	`149`	+*`arn:aws:iam::595280932656:role/customer-lambda-prod-destination-access` refers to Segment's AWS Account, and is what allows Segment's Destination to access the role to invoke your Lambda.
`150`	`150`
`151`	`151`	`>note ""`
`152`	`152`	`>Note: Source ID can be found by navigating toSettings > API Keys from your Segment source homepage.`
`@@ -158,7 +158,7 @@ To create an IAM role:`
`158`	`158`	`{`
`159`	`159`	`"Effect": "Allow",`
`160`	`160`	`"Principal": {`
`161`		`- "AWS": "arn:aws:iam::595280932656:root"`
	`161`	`+ "AWS": "arn:aws:iam::595280932656:role/customer-lambda-prod-destination-access"`
`162`	`162`	`},`
`163`	`163`	`"Action": "sts:AssumeRole",`
`164`	`164`	`"Condition": {`

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -691,7 +691,7 @@ To create an IAM role:`
`691`	`691`	`{`
`692`	`692`	`"Effect":"Allow",`
`693`	`693`	`"Principal": {`
`694`		`-"AWS":"arn:aws:iam::595280932656:root"`
	`694`	`+"AWS":"arn:aws:iam::595280932656:role/customer-personalize-prod-destination-access"`
`695`	`695`	`},`
`696`	`696`	`"Action":"sts:AssumeRole",`
`697`	`697`	`"Condition": {`

Comments

(0)