AWS connect documentation change
Summary
Added iam:CreateRole and iam:CreatePolicy permissions to 'Edit email domains and addresses' requirements
Security assessment
Expands documentation about required IAM permissions for email configuration, which relates to security controls but does not explicitly address a disclosed vulnerability or incident.
Diff
diff --git a/connect/latest/adminguide/security-iam-amazon-connect-permissions.md b/connect/latest/adminguide/security-iam-amazon-connect-permissions.md index 8e747d8b1..959dfcddc 100644 --- a/connect/latest/adminguide/security-iam-amazon-connect-permissions.md +++ b/connect/latest/adminguide/security-iam-amazon-connect-permissions.md @@ -283 +283 @@ View email domains and addresses | ses:GetIdentityVerificationAttributes ses:Des -Edit email domains and addresses | ses:CreateReceiptRule ses:UpdateReceiptRule ses:SetActiveReceiptRuleSet ses:CreateReceiptRuleSet ses:CreateEmailIdentity ses:TagResource ses:UntagResource ses:DeleteReceiptRule ses:DeleteReceiptRuleSet ses:CloneReceiptRuleSet ses:CreateConfigurationSet ses:CreateConfigurationSetEventDestination ses:PutEmailIdentityConfigurationSetAttributes ses:CreateEmailIdentityPolicy ses:UpdateEmailIdentityPolicy ses:DeleteEmailIdentityPolicy iam:CreateServiceLinkedRole iam:PassRole +Edit email domains and addresses | ses:CreateReceiptRule ses:UpdateReceiptRule ses:SetActiveReceiptRuleSet ses:CreateReceiptRuleSet ses:CreateEmailIdentity ses:TagResource ses:UntagResource ses:DeleteReceiptRule ses:DeleteReceiptRuleSet ses:CloneReceiptRuleSet ses:CreateConfigurationSet ses:CreateConfigurationSetEventDestination ses:PutEmailIdentityConfigurationSetAttributes ses:CreateEmailIdentityPolicy ses:UpdateEmailIdentityPolicy ses:DeleteEmailIdentityPolicy iam:CreateServiceLinkedRole iam:PassRole iam:CreateRole iam:CreatePolicy