AWS awssupport documentation change

Service: awssupport · 2025-10-01 · Documentation low

File: awssupport/latest/user/support-app-permissions.md

Summary

Updated Support App permissions policy with same Slack integration changes as managed policies file

Security assessment

Mirrors changes from other file - updates permissions for new features without security context. Maintains parity between docs but doesn't address vulnerabilities.

Diff

diff --git a/awssupport/latest/user/support-app-permissions.md b/awssupport/latest/user/support-app-permissions.md
index 6052a06a8..606b3c94f 100644
--- a//awssupport/latest/user/support-app-permissions.md
+++ b//awssupport/latest/user/support-app-permissions.md
@@ -80,0 +81,6 @@ You can update the policy to remove a permission from the AWS Support App.
+JSON
+    
+
+****
+    
+    
@@ -88,11 +94,13 @@ You can update the policy to remove a permission from the AWS Support App.
-                    "servicequotas:GetRequestedServiceQuotaChange",
-                    "servicequotas:GetServiceQuota",
-                    "servicequotas:RequestServiceQuotaIncrease",
-                    "support:AddAttachmentsToSet",
-                    "support:AddCommunicationToCase",
-                    "support:CreateCase",
-                    "support:DescribeCases",
-                    "support:DescribeCommunications",
-                    "support:DescribeSeverityLevels",
-                    "support:InitiateChatForCase",
-                    "support:ResolveCase"
+                    "supportapp:GetSlackOauthParameters",
+                    "supportapp:RedeemSlackOauthCode",
+                    "supportapp:DescribeSlackChannels",
+                    "supportapp:ListSlackWorkspaceConfigurations",
+                    "supportapp:ListSlackChannelConfigurations",
+                    "supportapp:CreateSlackChannelConfiguration",
+                    "supportapp:DeleteSlackChannelConfiguration",
+                    "supportapp:DeleteSlackWorkspaceConfiguration",
+                    "supportapp:GetAccountAlias",
+                    "supportapp:PutAccountAlias",
+                    "supportapp:DeleteAccountAlias",
+                    "supportapp:UpdateSlackChannelConfiguration",
+                    "iam:ListRoles"
@@ -101,8 +108,0 @@ You can update the policy to remove a permission from the AWS Support App.
-            },
-            {
-                "Effect": "Allow",
-                "Action": "iam:CreateServiceLinkedRole",
-                "Resource": "*",
-                "Condition": {
-                    "StringEquals": {"iam:AWSServiceName": "servicequotas.amazonaws.com"}
-                }