AWS solutions documentation change

Service: solutions · 2026-01-13 · Documentation low

File: solutions/latest/spatial-data-management-on-aws/planning-prerequisites.md

Summary

Added comprehensive 'Permission Requirements' section detailing required AWS service access and troubleshooting steps for permission issues

Security assessment

Focuses on IAM permissions and access control best practices. Documents security-related services (KMS, Secrets Manager, Verified Permissions) but doesn't address specific vulnerabilities. Enhances security documentation for deployment prerequisites.

Diff

diff --git a/solutions/latest/spatial-data-management-on-aws/planning-prerequisites.md b/solutions/latest/spatial-data-management-on-aws/planning-prerequisites.md
index 0f8700243..5ae6bf8e2 100644
--- a//solutions/latest/spatial-data-management-on-aws/planning-prerequisites.md
+++ b//solutions/latest/spatial-data-management-on-aws/planning-prerequisites.md
@@ -3 +3 @@
-AWS Account RequirementsKnowledge RequirementsDeployment Modes
+AWS Account RequirementsPermission RequirementsKnowledge RequirementsDeployment Modes
@@ -21,0 +22,87 @@ AWS Account RequirementsKnowledge RequirementsDeployment Modes
+## Permission Requirements
+
+Before deploying the Spatial Data Management solution, verify that your AWS user or role has the necessary permissions to create and manage AWS resources.
+
+**Console Access Check**
+
+Verify you can access and create resources in these AWS Console sections:
+
+**Core Services (Required):**
+
+  * CloudFormation
+
+  * IAM
+
+  * Amazon S3
+
+  * AWS Lambda
+
+  * Amazon DynamoDB
+
+  * AWS KMS
+
+
+
+
+**Application Services (Required):**
+
+  * Amazon Cognito
+
+  * Amazon API Gateway
+
+  * Amazon OpenSearch
+
+  * Amazon VPC/EC2
+
+  * Amazon CloudWatch Logs
+
+  * AWS Deadline Cloud
+
+  * Amazon Location Services
+
+
+
+
+**Content & Security Services (Required):**
+
+  * Amazon CloudFront
+
+  * AWS Secrets Manager
+
+  * AWS Systems Manager
+
+  * Amazon SQS
+
+  * Amazon EventBridge
+
+  * Amazon Verified Permissions
+
+
+
+
+**Analytics Services (Required):**
+
+  * AWS Glue
+
+  * Amazon Athena
+
+  * AWS CloudTrail
+
+
+
+
+### Troubleshooting Permission Issues
+
+If deployment fails with permission errors:
+
+  1. Check **CloudFormation Events** in the AWS Console for specific error messages
+
+  2. Look for "Access Denied" errors in the stack events
+
+  3. Verify you can access the failing service in the AWS Console
+
+  4. Contact your AWS administrator to grant missing permissions
+
+
+
+