AWS Security ChangesHomeSearch

AWS solutions documentation change

Service: solutions · 2025-04-20 · Documentation medium

File: solutions/latest/dea-api/cases-caseid-actions.md

Summary

Added detailed permissions-based action list schema, removed OPTIONS method docs, and expanded response model

Security assessment

Documents granular access control actions (e.g., VIEW_CASE_DETAILS, DOWNLOAD) which relate to security permissions, but does not indicate a security flaw being fixed.

Diff

diff --git a/solutions/latest/dea-api/cases-caseid-actions.md b/solutions/latest/dea-api/cases-caseid-actions.md
index 0553f9727..f3b61288e 100644
--- a//solutions/latest/dea-api/cases-caseid-actions.md
+++ b//solutions/latest/dea-api/cases-caseid-actions.md
@@ -5 +5 @@
-URIHTTP methods
+URIHTTP methodsSchemasProperties
@@ -7 +7,3 @@ URIHTTP methods
-#  Cases caseId Actions
+# Cases – Available actions by caseId
+
+Requests to the /cases/{caseId}/actions endpoint returns a list of actions that can be performed on the specified case based on the permissions of the requesting user. 
@@ -23,6 +24,0 @@ Path parametersName| Type| Required| Description
-### OPTIONS
-
-Path parametersName| Type| Required| Description  
----|---|---|---  
-`caseId`| String| True|   
-  
@@ -31 +27,57 @@ ResponsesStatus code| Response model| Description
-`204`| None| 204 response  
+`200`| `CaseUser`| Success  
+  
+## Schemas
+
+### Response bodies
+    
+    
+    {
+      "userUlid": "string",
+      "caseUlid": "string",
+      "actions": [
+        enum
+      ],
+      "caseName": "string",
+      "userFirstName": "string",
+      "userLastName": "string",
+      "created": "string",
+      "updated": "string"
+    }
+
+## Properties
+
+### CaseAction
+
+  * `VIEW_CASE_DETAILS`
+
+  * `UPDATE_CASE_DETAILS`
+
+  * `UPDATE_CASE_STATUS`
+
+  * `UPLOAD`
+
+  * `DOWNLOAD`
+
+  * `VIEW_FILES`
+
+  * `CASE_AUDIT`
+
+  * `INVITE`
+
+  * `RESTORE_FILES`
+
+
+
+
+### CaseUser
+
+Property| Type| Required| Description  
+---|---|---|---  
+`actions`| Array of type CaseAction| False|   
+`caseName`| string| False|   
+`caseUlid`| string| False|   
+`created`| string| False|   
+`updated`| string| False|   
+`userFirstName`| string| False|   
+`userLastName`| string| False|   
+`userUlid`| string| False|   
@@ -39 +91 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please
-Cases All-cases
+Cases – Audit by caseId
@@ -41 +93 @@ Cases All-cases
-Cases caseId Audit
+Cases – Case details by caseId