AWS security-ir documentation change

Service: security-ir · 2025-11-22 · Documentation low

File: security-ir/latest/userguide/using-service-linked-roles.md

Summary

Added IAM permissions for AI agent to interact with cases and comments.

Security assessment

Documents new permissions granted to service-linked roles for automated investigations, enhancing security transparency.

Diff

diff --git a/security-ir/latest/userguide/using-service-linked-roles.md b/security-ir/latest/userguide/using-service-linked-roles.md
index 03ae1d764..5fcd1fae1 100644
--- a//security-ir/latest/userguide/using-service-linked-roles.md
+++ b//security-ir/latest/userguide/using-service-linked-roles.md
@@ -48,0 +49,8 @@ Attached to this role is the AWS managed policy named [ AWSSecurityIncidentRespo
+  * _ListCases:_ Allows the service’s AI agent to view cases for the purposes of security investigation.
+
+  * _UpdateCase:_ Allows the service’s AI agent to update case metadata.
+
+  * _CreateCaseComment:_ Allows the service’s AI agent to post its results as a case comment.
+
+  * _ListComments:_ Allows the service’s AI agent to view case comments needed to perform automated investigations.
+