AWS quicksight documentation change

Service: quicksight · 2025-04-11 · Documentation low

File: quicksight/latest/user/iam-policy-examples.md

Summary

Updated IAM policy examples with modified SSO and identity management permissions

Security assessment

Changes refine access control policy examples but don't indicate response to specific security vulnerabilities

Diff

diff --git a/quicksight/latest/user/iam-policy-examples.md b/quicksight/latest/user/iam-policy-examples.md
index a7f91467f..1b370a652 100644
--- a//quicksight/latest/user/iam-policy-examples.md
+++ b//quicksight/latest/user/iam-policy-examples.md
@@ -390,5 +389,0 @@ This example explicitly denies permission to unsubscribe from Amazon QuickSight.
-                    "sso:ListApplications",
-                    "sso:GetSharedSsoConfiguration",
-                    "sso:PutApplicationAssignmentConfiguration",
-                    "sso:PutApplicationAccessScope",
-                    "sso:GetSSOStatus",
@@ -396,3 +390,0 @@ This example explicitly denies permission to unsubscribe from Amazon QuickSight.
-                    "organizations:ListAWSServiceAccessForOrganization",
-                    "organizations:DisableAWSServiceAccess",
-                    "organizations:EnableAWSServiceAccess",
@@ -401,8 +392,0 @@ This example explicitly denies permission to unsubscribe from Amazon QuickSight.
-                    "user-subscriptions:ListClaims",
-                    "user-subscriptions:ListUserSubscriptions",
-                    "user-subscriptions:DeleteClaim",
-                    "sso-directory:DescribeUsers",
-                    "sso-directory:DescribeGroups",
-                    "sso-directory:SearchGroups",
-                    "sso-directory:SearchUsers",
-                    "sso-directory:DescribeGroup",
@@ -410,5 +394,5 @@ This example explicitly denies permission to unsubscribe from Amazon QuickSight.
-                    "sso-directory:DescribeDirectory",
-                    "signin:ListTrustedIdentityPropagationApplicationsForConsole",
-                    "signin:CreateTrustedIdentityPropagationApplicationForConsole",
-                    "q:CreateAssignment",
-                    "q:DeleteAssignment"
+                    "sso:ListApplicationAssignments",
+                    "sso-directory:DescribeGroup",
+                    "organizations:ListAWSServiceAccessForOrganization",
+                    "identitystore:DescribeUser",
+                    "identitystore:DescribeGroup"