AWS Security ChangesHomeSearch

AWS solutions documentation change

Service: solutions · 2025-07-18 · Documentation medium

File: solutions/latest/clickstream-analytics-on-aws/identity-management.md

Summary

Updated permissions matrix with detailed access levels and API access notes

Security assessment

Enhanced documentation of role-based access controls improves security posture by clarifying permissions. While not fixing vulnerabilities, it strengthens identity management documentation.

Diff

diff --git a/solutions/latest/clickstream-analytics-on-aws/identity-management.md b/solutions/latest/clickstream-analytics-on-aws/identity-management.md
index 7298d3fdc..b69d11329 100644
--- a//solutions/latest/clickstream-analytics-on-aws/identity-management.md
+++ b//solutions/latest/clickstream-analytics-on-aws/identity-management.md
@@ -32,8 +32,10 @@ The specific features for roles are shown in the following table:
-Project management  |  Yes  |  Yes  |  No  |  No   
-Operation and Alarm  |  Yes  |  Yes  |  No  |  No   
-Plugin Management  |  Yes  |  Yes  |  No  |  No   
-Identity Management  |  Yes  |  No  |  No  |  No   
-Analytics Studio - Dashboards  |  Yes  |  No  |  Yes  |  Yes   
-Analytics Studio - Exploration |  Yes  |  No  |  Yes  |  Yes   
-Analytics Studio - Analyses  |  Yes  |  No  |  Yes  |  No   
-Analytics Studio - Data Management  |  Yes  |  No  |  Yes  |  Yes   
+Project management  |  Read/Write  |  Read/Write  |  Read*  |  Read*   
+Operation and Alarm  |  Read/Write  |  Read/Write  |  Read*  |  Read*   
+Plugin Management  |  Read/Write  |  Read/Write  |  Read*  |  Read*   
+Identity Management  |  Read/Write  |  None  |  None  |  None   
+Analytics Studio - Dashboards  |  Read/Write  |  None  |  Read/Write  |  Read   
+Analytics Studio - Exploration |  Read/Write  |  None  |  Read/Write  |  Read   
+Analytics Studio - Analyses  |  Read/Write  |  None  |  Read/Write  |  None   
+Analytics Studio - Data Management  |  Read/Write  |  None  |  Read/Write  |  Read   
+  
+* Accessable through the API only