AWS cli medium security documentation change
Summary
Modified permission documentation to add restrictions about namespace/account root sharing for action connectors
Security assessment
Explicitly states that namespace sharing and account root sharing are not supported for action connectors, which clarifies access control limitations. This change documents security-relevant permissions restrictions to prevent unintended resource sharing.
Diff
diff --git a/cli/latest/reference/quicksight/update-folder-permissions.md b/cli/latest/reference/quicksight/update-folder-permissions.md index a35ea7052..90b8d0f64 100644 --- a//cli/latest/reference/quicksight/update-folder-permissions.md +++ b//cli/latest/reference/quicksight/update-folder-permissions.md @@ -15 +15 @@ - * [AWS CLI 2.31.10 Command Reference](../../index.html) » + * [AWS CLI 2.31.13 Command Reference](../../index.html) » @@ -138,3 +138,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/quicks ->>> * The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.) ->>> * The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.) ->>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.) +>>> * The ARN of an Quick Sight user or group associated with a data source or dataset. (This is common.) +>>> * The ARN of an Quick Sight user, group, or namespace associated with an analysis, dashboard, template, or theme. Namespace sharing is not supported for action connectors. (This is common.) +>>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a Quick Sight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. Account root sharing is not supported for action connectors. (This is less common.) @@ -201,3 +201,3 @@ JSON Syntax: ->>> * The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.) ->>> * The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.) ->>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.) +>>> * The ARN of an Quick Sight user or group associated with a data source or dataset. (This is common.) +>>> * The ARN of an Quick Sight user, group, or namespace associated with an analysis, dashboard, template, or theme. Namespace sharing is not supported for action connectors. (This is common.) +>>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a Quick Sight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. Account root sharing is not supported for action connectors. (This is less common.) @@ -383,3 +383,3 @@ Permissions -> (list) ->>> * The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.) ->>> * The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.) ->>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.) +>>> * The ARN of an Quick Sight user or group associated with a data source or dataset. (This is common.) +>>> * The ARN of an Quick Sight user, group, or namespace associated with an analysis, dashboard, template, or theme. Namespace sharing is not supported for action connectors. (This is common.) +>>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a Quick Sight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. Account root sharing is not supported for action connectors. (This is less common.) @@ -423 +423 @@ RequestId -> (string) - * [AWS CLI 2.31.10 Command Reference](../../index.html) » + * [AWS CLI 2.31.13 Command Reference](../../index.html) »