AWS servicequotas documentation change
Summary
Added new section 'Service Quotas Automatic Management permissions' detailing required IAM policies and permissions for Automatic Management functionality.
Security assessment
Documents security controls (IAM policies) required for a feature but does not address a specific vulnerability. Enhances security documentation by clarifying required permissions.
Diff
diff --git a/servicequotas/latest/userguide/automatic-management.md b/servicequotas/latest/userguide/automatic-management.md index bc6cd560e..d0de96333 100644 --- a//servicequotas/latest/userguide/automatic-management.md +++ b//servicequotas/latest/userguide/automatic-management.md @@ -4,0 +5,2 @@ +Service Quotas Automatic Management permissions + @@ -53,0 +56,2 @@ Configure notifications through multiple channels: + * Service Quotas Automatic Management permissions + @@ -66,0 +71,33 @@ Configure notifications through multiple channels: +## Service Quotas Automatic Management permissions + +To start Automatic Management, you'll need permissions to view AWS Health notifications and use the Service Quotas console, AWS CLI, or API actions. + +###### Permissions to use Automatic Management + + * You should use the following AWS Managed Policies for Automatic Management. + + * [`ServiceQuotasFullAccess`](https://docs.aws.amazon.com/servicequotas/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-POLICYNAME) + + * [`AWSHealthFullAccess`](https://docs.aws.amazon.com/health/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-AWSHealthFullAccess) + + + + +###### Permissions to view Automatic Management + + * [`AWSHealthFullAccess`](https://docs.aws.amazon.com/health/latest/ug/security-iam-awsmanpol.html#security-iam-awsmanpol-AWSHealthFullAccess). + + + + +For more information on creating IAM policies, see the following links. + + * [IAM tutorial: Create and attach your first customer managed policy](https://docs.aws.amazon.com/IAM/latest/UserGuide/tutorial_managed-policies.html) in the _AWS Identity and Access Management User Guide_ + + * [Define custom IAM permissions with customer managed policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create.html) in the _AWS Identity and Access Management User Guide_ + + * [Create IAM policies (console)](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create-console.html) in the _AWS Identity and Access Management User Guide_ + + + +