AWS Security ChangesHomeSearch

AWS iot-sitewise documentation change

Service: iot-sitewise · 2025-07-19 · Documentation low

File: iot-sitewise/latest/userguide/monitor-service-role.md

Summary

Added JSON formatting markers and expanded IAM policy example with project/dashboard/access policy permissions

Security assessment

Changes include formatting improvements and an expanded IAM policy example, but no explicit security vulnerability fixes or new security feature documentation.

Diff

diff --git a/iot-sitewise/latest/userguide/monitor-service-role.md b/iot-sitewise/latest/userguide/monitor-service-role.md
index c900996e0..2ba589502 100644
--- a//iot-sitewise/latest/userguide/monitor-service-role.md
+++ b//iot-sitewise/latest/userguide/monitor-service-role.md
@@ -60,0 +61,6 @@ The role uses the following permissions policy, which starts with **AWSIoTSiteWi
+JSON
+    
+
+****
+    
+    
@@ -164,0 +171,46 @@ The role uses the following permissions policy, which starts with **AWSIoTSiteWi
+
+JSON
+    
+
+****
+    
+    
+    
+    {
+      "Version": "2012-10-17",
+      "Statement": [
+        {
+          "Effect": "Allow",
+          "Action": [
+            "iotsitewise:CreateProject",
+            "iotsitewise:DescribeProject",
+            "iotsitewise:UpdateProject",
+            "iotsitewise:DeleteProject",
+            "iotsitewise:ListProjects",
+            "iotsitewise:BatchAssociateProjectAssets",
+            "iotsitewise:BatchDisassociateProjectAssets",
+            "iotsitewise:ListProjectAssets",
+            "iotsitewise:CreateDashboard",
+            "iotsitewise:DescribeDashboard",
+            "iotsitewise:UpdateDashboard",
+            "iotsitewise:DeleteDashboard",
+            "iotsitewise:ListDashboards",
+            "iotsitewise:CreateAccessPolicy",
+            "iotsitewise:DescribeAccessPolicy",
+            "iotsitewise:UpdateAccessPolicy",
+            "iotsitewise:DeleteAccessPolicy",
+            "iotsitewise:ListAccessPolicies",
+            "iotsitewise:DescribeAsset",
+            "iotsitewise:ListAssets",
+            "iotsitewise:ListAssociatedAssets",
+            "iotsitewise:DescribeAssetProperty",
+            "iotsitewise:GetAssetPropertyValue",
+            "iotsitewise:GetAssetPropertyValueHistory",
+            "iotsitewise:GetAssetPropertyAggregates"
+          ],
+          "Resource": "*"
+        }
+      ]
+    }
+    
+
@@ -185,0 +238,6 @@ The role uses the following permissions policy, which starts with **IoTSiteWiseA
+JSON
+    
+
+****
+    
+