AWS systems-manager-automation-runbooks documentation change

Service: systems-manager-automation-runbooks · 2025-10-25 · Documentation low

File: systems-manager-automation-runbooks/latest/userguide/automation-associate-phone-numbers-to-connect-contact-flows.md

Summary

Added example IAM policy JSON with specific resource ARNs

Security assessment

Provides concrete IAM policy examples for security configuration. Enhances security documentation by showing least-privilege practices but doesn't address any specific vulnerability.

Diff

diff --git a/systems-manager-automation-runbooks/latest/userguide/automation-associate-phone-numbers-to-connect-contact-flows.md b/systems-manager-automation-runbooks/latest/userguide/automation-associate-phone-numbers-to-connect-contact-flows.md
index 95ec58ded..4db419453 100644
--- a//systems-manager-automation-runbooks/latest/userguide/automation-associate-phone-numbers-to-connect-contact-flows.md
+++ b//systems-manager-automation-runbooks/latest/userguide/automation-associate-phone-numbers-to-connect-contact-flows.md
@@ -126,0 +127,45 @@ If providing `LambdaRoleArn` parameter, the role requires the following actions
+JSON
+    
+
+****
+    
+    
+    
+    {
+    	"Version":"2012-10-17",		 	 	 
+    	"Statement": [
+    		{
+    			"Action": [
+    				"logs:CreateLogGroup"
+    			],
+    			"Resource": "arn:aws:logs:us-east-1:111122223333:*",
+    			"Effect": "Allow"
+    		},
+    		{
+    			"Action": [
+    				"logs:CreateLogStream",
+    				"logs:PutLogEvents"
+    			],
+    			"Resource": "arn:aws:logs:us-east-1:111122223333:*",
+    			"Effect": "Allow"
+    		},
+    		{
+    			"Action": [
+    				"connect:AssociatePhoneNumberContactFlow"
+    			],
+    			"Resource": "*",
+    			"Effect": "Allow"
+    		},
+    		{
+    			"Action": [
+    				"s3:PutObject",
+    				"s3:GetObject"
+    			],
+    			"Resource": "arn:aws:s3:::amzn-s3-demo-bucket/DESTINATION_FILE_PATH*",
+    			"Effect": "Allow"
+    		}
+    	]
+    }
+        
+    
+