AWS iotanalytics documentation change
Summary
Restructured IAM usage documentation with role-specific guidance and links
Security assessment
Improves IAM documentation structure and adds explicit guidance for different roles. Enhances security awareness but doesn't address a specific vulnerability.
Diff
diff --git a/iotanalytics/latest/userguide/security-iam.md b/iotanalytics/latest/userguide/security-iam.md index 7e3fbae67..392f42254 100644 --- a//iotanalytics/latest/userguide/security-iam.md +++ b//iotanalytics/latest/userguide/security-iam.md @@ -15 +15,7 @@ AWS Identity and Access Management (IAM) is an AWS service that helps an adminis -How you use AWS Identity and Access Management (IAM) differs, depending on the work that you do in AWS IoT Analytics. +How you use AWS Identity and Access Management (IAM) differs based on your role: + + * **Service user** \- request permissions from your administrator if you cannot access features (see [Troubleshooting AWS IoT Analytics identity and access](./security_iam_troubleshoot.html)) + + * **Service administrator** \- determine user access and submit permission requests (see [How AWS IoT Analytics works with IAM](./security_iam_service-with-iam.html)) + + * **IAM administrator** \- write policies to manage access (see [AWS IoT Analytics identity-based policy examples](./security_iam_id-based-policy-examples.html)) @@ -17 +22,0 @@ How you use AWS Identity and Access Management (IAM) differs, depending on the w -**Service user** – If you use the AWS IoT Analytics service to do your job, then your administrator provides you with the credentials and permissions that you need. As you use more AWS IoT Analytics features to do your work, you might need additional permissions. Understanding how access is managed can help you request the right permissions from your administrator. If you cannot access a feature in AWS IoT Analytics, see [Troubleshooting AWS IoT Analytics identity and access](./security_iam_troubleshoot.html). @@ -19 +23,0 @@ How you use AWS Identity and Access Management (IAM) differs, depending on the w -**Service administrator** – If you're in charge of AWS IoT Analytics resources at your company, you probably have full access to AWS IoT Analytics. It's your job to determine which AWS IoT Analytics features and resources your service users should access. You must then submit requests to your IAM administrator to change the permissions of your service users. Review the information on this page to understand the basic concepts of IAM. To learn more about how your company can use IAM with AWS IoT Analytics, see [How AWS IoT Analytics works with IAM](./security_iam_service-with-iam.html). @@ -21 +24,0 @@ How you use AWS Identity and Access Management (IAM) differs, depending on the w -**IAM administrator** – If you're an IAM administrator, you might want to learn details about how you can write policies to manage access to AWS IoT Analytics. To view example AWS IoT Analytics identity-based policies that you can use in IAM, see [AWS IoT Analytics identity-based policy examples](./security_iam_id-based-policy-examples.html).