AWS awssupport documentation change

Service: awssupport · 2025-10-01 · Documentation low

File: awssupport/latest/user/support-app-managed-policies.md

Summary

Replaced service quota and support case permissions with Slack integration and account alias management permissions in Support App policy

Security assessment

Policy changes reflect feature updates (Slack integration) rather than security fixes. Removal of iam:CreateServiceLinkedRole reduces privileges but isn't explicitly tied to a security disclosure.

Diff

diff --git a/awssupport/latest/user/support-app-managed-policies.md b/awssupport/latest/user/support-app-managed-policies.md
index e8f167870..d7e9358c7 100644
--- a//awssupport/latest/user/support-app-managed-policies.md
+++ b//awssupport/latest/user/support-app-managed-policies.md
@@ -46,0 +47,6 @@ This policy includes the following permissions:
+JSON
+    
+
+****
+    
+    
@@ -54,11 +60,13 @@ This policy includes the following permissions:
-                    "servicequotas:GetRequestedServiceQuotaChange",
-                    "servicequotas:GetServiceQuota",
-                    "servicequotas:RequestServiceQuotaIncrease",
-                    "support:AddAttachmentsToSet",
-                    "support:AddCommunicationToCase",
-                    "support:CreateCase",
-                    "support:DescribeCases",
-                    "support:DescribeCommunications",
-                    "support:DescribeSeverityLevels",
-                    "support:InitiateChatForCase",
-                    "support:ResolveCase"
+                    "supportapp:GetSlackOauthParameters",
+                    "supportapp:RedeemSlackOauthCode",
+                    "supportapp:DescribeSlackChannels",
+                    "supportapp:ListSlackWorkspaceConfigurations",
+                    "supportapp:ListSlackChannelConfigurations",
+                    "supportapp:CreateSlackChannelConfiguration",
+                    "supportapp:DeleteSlackChannelConfiguration",
+                    "supportapp:DeleteSlackWorkspaceConfiguration",
+                    "supportapp:GetAccountAlias",
+                    "supportapp:PutAccountAlias",
+                    "supportapp:DeleteAccountAlias",
+                    "supportapp:UpdateSlackChannelConfiguration",
+                    "iam:ListRoles"
@@ -67,8 +74,0 @@ This policy includes the following permissions:
-            },
-            {
-                "Effect": "Allow",
-                "Action": "iam:CreateServiceLinkedRole",
-                "Resource": "*",
-                "Condition": {
-                    "StringEquals": {"iam:AWSServiceName": "servicequotas.amazonaws.com"}
-                }