AWS aurora-dsql documentation change
Summary
Updated ABAC support from Partial to Yes, service-linked roles from No to Yes, and added service-specific role documentation
Security assessment
Documents expanded support for attribute-based access control (ABAC) and service-linked roles - security features that improve granular access control - but does not indicate patching of a vulnerability
Diff
diff --git a/aurora-dsql/latest/userguide/security_iam_service-with-iam.md b/aurora-dsql/latest/userguide/security_iam_service-with-iam.md index 37a4ada29..bfb03b6c6 100644 --- a//aurora-dsql/latest/userguide/security_iam_service-with-iam.md +++ b//aurora-dsql/latest/userguide/security_iam_service-with-iam.md @@ -7,2 +6,0 @@ Identity-based policiesResource-based policiesPolicy actionsPolicy resourcesPoli -Amazon Aurora DSQL is provided as a Preview service. To learn more, see [Betas and Previews ](https://aws.amazon.com/service-terms/) in the AWS Service Terms. - @@ -21 +19 @@ ACLs | No -ABAC (tags in policies) | Partial +ABAC (tags in policies) | Yes @@ -25 +23 @@ Service roles | Yes -Service-linked roles | No +Service-linked roles | Yes @@ -119 +117 @@ Access control lists (ACLs) control which principals (account members, users, or -**Supports ABAC (tags in policies):** Partial +**Supports ABAC (tags in policies):** Yes @@ -159 +157 @@ Changing the permissions for a service role might break Aurora DSQL functionalit -**Supports service-linked roles:** No +**Supports service-linked roles:** Yes @@ -163 +161 @@ A service-linked role is a type of service role that is linked to an AWS service -For details about creating or managing service-linked roles, see [AWS services that work with IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html). Find a service in the table that includes a `Yes` in the **Service-linked role** column. Choose the **Yes** link to view the service-linked role documentation for that service. +For details about creating or managing service-linked roles for Aurora DSQL, see [Using service-linked roles in Aurora DSQL](./working-with-service-linked-roles.html).