diff --git a/_chapters/create-a-cognito-identity-pool.md b/_chapters/create-a-cognito-identity-pool.md
index cd02cf748..a8e8133e1 100644
--- a/_chapters/create-a-cognito-identity-pool.md
+++ b/_chapters/create-a-cognito-identity-pool.md
@@ -80,7 +80,7 @@ In our case `YOUR_S3_UPLOADS_BUCKET_NAME` is `notes-app-uploads`, `YOUR_API_GATE
         "execute-api:Invoke"
       ],
       "Resource": [
-        "arn:aws:execute-api:YOUR_API_GATEWAY_REGION:*:YOUR_API_GATEWAY_ID/*/*/*"
+        "arn:aws:execute-api:YOUR_API_GATEWAY_REGION:*:YOUR_API_GATEWAY_ID/*"
       ]
     }
   ]