AWS aws-supply-chain documentation change
Summary
Restructured role-based access control documentation with expanded details about Manage and View access levels, removed step-by-step instructions, and added link to user access management
Security assessment
The changes enhance documentation of access control features by detailing specific capabilities for each role type, but there is no evidence of addressing a specific security vulnerability. The update improves clarity around security-related permissions but does not indicate a security fix.
Diff
diff --git a/aws-supply-chain/latest/userguide/rolebased.md b/aws-supply-chain/latest/userguide/rolebased.md index 222b7e630..cb0e32731 100644 --- a//aws-supply-chain/latest/userguide/rolebased.md +++ b//aws-supply-chain/latest/userguide/rolebased.md @@ -5 +5 @@ -# Role based access control +# Role-based access control @@ -7 +7 @@ -You can assign permission roles to the Demand Planner user role. +AWS Supply Chain Demand Planning offers two default access levels: @@ -9 +9 @@ You can assign permission roles to the Demand Planner user role. - * _Manage – Select this permission role if you want the Demand Planner to generate forecasts, add overrides, publish demand plans, and access the Model Analyzer._ + * Manage Access @@ -11 +11 @@ You can assign permission roles to the Demand Planner user role. - * _View – Select this permission role if you want the Demand Planner to only view the published demand plans._ + * Full demand planning capabilities (create, configure, generate forecasts) @@ -12,0 +13 @@ You can assign permission roles to the Demand Planner user role. + * Add overrides and publish demand plans @@ -13,0 +15 @@ You can assign permission roles to the Demand Planner user role. + * Export plans and reports @@ -14,0 +17 @@ You can assign permission roles to the Demand Planner user role. + * Access data validations, demand pattern analysis, and Model Analyzer @@ -16 +19 @@ You can assign permission roles to the Demand Planner user role. -To assign permission roles, complete the following steps: + * View Access @@ -18 +21 @@ To assign permission roles, complete the following steps: - 1. In the left navigation pane on the AWS Supply Chain dashboard, choose the **Settings** icon. + * View created and published demand plans @@ -20 +23 @@ To assign permission roles, complete the following steps: - 2. Under Organization, choose **Users and Permissions**. + * View demand pattern analysis (**Demand patterns** tab in the **Forecast review** page) @@ -22 +24,0 @@ To assign permission roles, complete the following steps: - 3. Choose **Permission Roles**. @@ -24 +25,0 @@ To assign permission roles, complete the following steps: -You can edit an existing permission role or create a new one. @@ -26 +26,0 @@ You can edit an existing permission role or create a new one. - @@ -28 +28 @@ You can edit an existing permission role or create a new one. - 4. Choose **Create New Role**. +###### Topics @@ -30,7 +30 @@ You can edit an existing permission role or create a new one. - 5. Under **Role Name** , enter a name for the demand planner role. - - 6. Under **Demand Planning** , slide the **Manage** or **View** button to assign the permission role. - - - - 7. Choose **Save**. + * [Managing user access](./manage-user-access.html) @@ -49 +43 @@ Manage Demand Plan settings -Supply Planning +Managing user access