AWS quicksuite documentation change
Summary
Restructured action connector creation steps, removed pre-prod environment note, updated trust policy language, replaced workflow usage instructions with next steps guidance, and reorganized content flow.
Security assessment
Changes are procedural improvements and content reorganization without evidence of addressing specific vulnerabilities. The removal of pre-prod environment guidance doesn't indicate a resolved security issue, and the trust policy update maintains equivalent security posture by continuing to require assume role permissions.
Diff
diff --git a/quicksuite/latest/userguide/builtin-services-integration.md b/quicksuite/latest/userguide/builtin-services-integration.md index b820dc8c7..625b56d1b 100644 --- a//quicksuite/latest/userguide/builtin-services-integration.md +++ b//quicksuite/latest/userguide/builtin-services-integration.md @@ -5 +5 @@ -What you can doSupported AWS servicesBefore you beginPrepare IAM role and permissionsCreate AWS services action connectorUse action connectors in workflows +What you can doSupported AWS servicesBefore you beginPrepare IAM role and permissionsCreate AWS services action connectorNext steps @@ -73 +73 @@ First, you will need to create an IAM role that will be used by Amazon Quick Sui - 4. In the trust relationship, give the assume role permission to `quicksight.amazonaws.com`. This allows Amazon Quick Suite to assume this role and call Amazon S3/Amazon Textract/etc on your behalf. + 4. In the trust relationship, give the assume role permission to `quicksight.amazonaws.com`. This allows Amazon Quick Suite to assume this role and call AWS services on your behalf. @@ -82,4 +81,0 @@ Example trust policy: -###### Note - -For pre-prod stages, you will also have to include `"quicksight-test.amazonaws.com"` in the `"Service"` array. - @@ -131 +127 @@ After preparing your IAM role and permissions, follow these steps to create your - 6. Select **Next**. + 6. Select **Next** to eview all of the supported actions in the list for your selected service. @@ -133 +129 @@ After preparing your IAM role and permissions, follow these steps to create your - 7. Review all of the supported actions in the list for your selected service. + 7. Select **Next**. @@ -135,3 +131 @@ After preparing your IAM role and permissions, follow these steps to create your - 8. Select **Next**. - - 9. Customize the connection details: + 8. Customize the connection details: @@ -145,12 +139 @@ After preparing your IAM role and permissions, follow these steps to create your - 10. Select **Next**. - - 11. Add users you want to share the action connector with. - - 12. Select **Next** to finish creating the action connector. - - - - -After creating the action connector, it becomes available for use in Amazon Quick Automate workflows. The connector will be found in Actions tab under integration. - -## Use action connectors in workflows + 9. Select **Next**. @@ -158 +141 @@ After creating the action connector, it becomes available for use in Amazon Quic -After setting up your AWS services action connector, you can use it in Amazon Quick Automate workflows. + 10. Share the integration with users and/or user groups. @@ -160 +143 @@ After setting up your AWS services action connector, you can use it in Amazon Qu -### Access in Amazon Quick Automate + 1. Provide **Owner** access, for any users who need to edit, share and delete the integration. Note: Owner access is required to add Integrations to Automation Groups in order to give access within Quick Automate. @@ -162 +145 @@ After setting up your AWS services action connector, you can use it in Amazon Qu -To use your AWS action connector in Amazon Quick Automate: + 2. Provide **User** access, for any users who need to invoke actions across Quick Suite. For a list of integrations supported in various Quick Suite capabilities, see [Supported action connector types and available actions](https://docs.aws.amazon.com/quicksuite/latest/userguide/action-connector-apis-supported-types.html#action-connector-compatibility-matrix). @@ -164 +147 @@ To use your AWS action connector in Amazon Quick Automate: - 1. Open Amazon Quick Automate and go to Projects. + 11. Select **Add** to finish creating the action connector. For more information, see [Managing existing integrations](https://docs.aws.amazon.com/quicksuite/latest/userguide/integration-workflows.html). @@ -166 +148,0 @@ To use your AWS action connector in Amazon Quick Automate: - 2. Click Manage groups and select your group. @@ -168 +149,0 @@ To use your AWS action connector in Amazon Quick Automate: - 3. In the Assets sections, click **Add** → **Actions**. @@ -170 +150,0 @@ To use your AWS action connector in Amazon Quick Automate: - 4. Select the Action you created earlier and Add to the automation group. @@ -172,16 +152 @@ To use your AWS action connector in Amazon Quick Automate: - 5. Go to the automation in the group and your action will be available for use. - - 6. In the Actions panel, look for your AWS service action connector. - - 7. Drag the desired action into your workflow. - - 8. Configure the action parameters as needed for your use case. - - 9. Test and save your workflow. - - - - -### Manage existing connectors - -You can modify your existing AWS action connectors: +After creating the action connector, it becomes available for use in Amazon Quick Automate workflows. The connector will be found in Actions tab under integration. @@ -189 +154 @@ You can modify your existing AWS action connectors: - 1. In the Admin console, choose **AWS actions**. +## Next steps @@ -191 +156 @@ You can modify your existing AWS action connectors: - 2. Select your action connector from the list. +After creating your action integration, you can: @@ -193 +158 @@ You can modify your existing AWS action connectors: - 3. Choose the actions menu, then choose **Edit**. + * Share the integration with additional users or groups as needed @@ -195 +160 @@ You can modify your existing AWS action connectors: - 4. Update your configuration settings as needed and choose **Save**. + * Add the integration to an Automation Group to use it in Amazon Quick Suite Automate. For more information, see [Getting Started](https://docs.aws.amazon.com/quicksuite/latest/userguide/getting-started-quick-automate.html#automate-setup-tasks). @@ -196,0 +162 @@ You can modify your existing AWS action connectors: + * Monitor the integration's usage and performance through the admin console @@ -197,0 +164 @@ You can modify your existing AWS action connectors: + * Update the integration's configuration or permissions as requirements change @@ -200 +166,0 @@ You can modify your existing AWS action connectors: -###### Note @@ -202 +167,0 @@ You can modify your existing AWS action connectors: -AWS services action connectors use IAM role-based authentication and can only be used within Amazon Quick Automate workflows. Make sure your IAM role has the minimum required permissions for the AWS services you plan to use.