AWS awssupport documentation change
Summary
Added details about deleting the AWSServiceRoleForSupport role for Organizations customers with Enterprise Support
Security assessment
Clarifies security implications of role deletion (restricting AWS Support access) but does not indicate a resolved vulnerability.
Diff
diff --git a/awssupport/latest/user/using-service-linked-roles-sup.md b/awssupport/latest/user/using-service-linked-roles-sup.md index 07ead13ae..0a42a00ab 100644 --- a//awssupport/latest/user/using-service-linked-roles-sup.md +++ b//awssupport/latest/user/using-service-linked-roles-sup.md @@ -61,0 +62,2 @@ The `AWSServiceRoleForSupport` role is necessary for Support to provide administ +Customers onboarded to AWS Organizations and who have an Enterprise Support plan can delete the `AWSServiceRoleForSupport` service-linked role. Deleting this role restricts access to your resources by AWS Support engineers, limiting their ability to perform actions on your behalf. For more information, or to request to delete the `AWSServiceRoleForSupport` service-linked role, contact your Technical Account Manager (TAM). +