AWS iot-mi documentation change

Service: iot-mi · 2025-08-13 · Documentation low

File: iot-mi/latest/devguide/concepts-building-connector.md

Summary

Added required IAM permissions section detailing secretsmanager:GetSecretValue and lambda:Invoke requirements for connector development

Security assessment

Documents security-related permissions needed for proper connector authorization but doesn't address a specific vulnerability

Diff

diff --git a/iot-mi/latest/devguide/concepts-building-connector.md b/iot-mi/latest/devguide/concepts-building-connector.md
index a791a6c9e..429e9f30b 100644
--- a//iot-mi/latest/devguide/concepts-building-connector.md
+++ b//iot-mi/latest/devguide/concepts-building-connector.md
@@ -35,0 +36,2 @@ Before you create a C2C (Cloud-to-Cloud) connector, you need the following:
+  * When you build your connector, you need certain IAM permissions. To use the 
+
@@ -54,0 +57,13 @@ In addition, to test the connector, the developer of the connector must have the
+### Required permissions
+
+When you build your connector, you need certain IAM permissions. In addition to the `iotmanagedintegrations:` permissions for the actions, you need the following permissions:
+
+  * [CreateAccountAssociation](https://docs.aws.amazon.com/iot-mi/latest/APIReference/API_CreateAccountAssociation.html), [CreateConnectorDestination](https://docs.aws.amazon.com/iot-mi/latest/APIReference/API_CreateConnectorDestination.html), [GetAccountAssociation](https://docs.aws.amazon.com/iot-mi/latest/APIReference/API_GetAccountAssociation.html), and [StartAccountAssociationRefresh](https://docs.aws.amazon.com/iot-mi/latest/APIReference/API_StartAccountAssociationRefresh.html), require `secretsmanager:GetSecretValue`
+
+  * [CreateCloudConnector](https://docs.aws.amazon.com/iot-mi/latest/APIReference/API_CreateCloudConnector.html) requires `lambda:Invoke`
+
+
+
+
+For more information about `iotmanagedintegrations:` permissions and actions, see [Actions defined by AWS Managed integrations](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiotmanagedintegrations.html#awsiotmanagedintegrations-actions-as-permissions)
+