Skip to content

Commit e926b5e

Browse files
Merge pull request aws-samples#305 from cji/patch-1
Treat region as a variable, like account-id in config-secrets
2 parents 50e9509 + 9666ca7 commit e926b5e

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

config-secrets/readme.adoc

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -584,8 +584,8 @@ and click it. In the Permissions tab, expand the inline policy for `nodes.exampl
584584
"ssm:GetParameter"
585585
],
586586
"Resource": [
587-
"arn:aws:ssm:us-east-1:<account-id>:parameter/GREETING",
588-
"arn:aws:ssm:us-east-1:<account-id>:parameter/NAME"
587+
"arn:aws:ssm:<region>:<account-id>:parameter/GREETING",
588+
"arn:aws:ssm:<region>:<account-id>:parameter/NAME"
589589
]
590590
}
591591
]
@@ -601,7 +601,7 @@ Only the value of the secure string parameter is encrypted. The name of the para
601601
--name GREETING \
602602
--value Hello \
603603
--type SecureString \
604-
--key-id arn:aws:kms:us-east-1:<account-id>:key/414a963b-7fe4-4a61-b19f-ea408b9bda3b
604+
--key-id arn:aws:kms:<region>:<account-id>:key/414a963b-7fe4-4a61-b19f-ea408b9bda3b
605605
{
606606
"Version": 1
607607
}
@@ -642,7 +642,7 @@ By default, the encrypted value of the secret is shown in the output.
642642
--name NAME \
643643
--value World \
644644
--type SecureString \
645-
--key-id arn:aws:kms:us-east-1:<account-id>:key/414a963b-7fe4-4a61-b19f-ea408b9bda3b
645+
--key-id arn:aws:kms:<region>:<account-id>:key/414a963b-7fe4-4a61-b19f-ea408b9bda3b
646646
{
647647
"Version": 1
648648
}

0 commit comments

Comments
 (0)