AWS awssupport medium security documentation change

Service: awssupport · 2026-02-28 · Security-related medium

File: awssupport/latest/user/creating-resources-with-cloudformation.md

Summary

Updated Slack workspace registration process to use API calls instead of support case, added IAM role creation step, and added Slack channel configuration API reference

Security assessment

The change introduces IAM role creation requirements and API-based configuration, which directly relates to access control and permissions management. Creating IAM roles with required permissions is a security best practice for least privilege access.

Diff

diff --git a/awssupport/latest/user/creating-resources-with-cloudformation.md b/awssupport/latest/user/creating-resources-with-cloudformation.md
index 08091c2bd..1e2e7aab3 100644
--- a//awssupport/latest/user/creating-resources-with-cloudformation.md
+++ b//awssupport/latest/user/creating-resources-with-cloudformation.md
@@ -29 +29 @@ You can choose whether to use CloudFormation templates or not. If you don't use
-  * Create a support case with AWS Support to [authorize multiple accounts](./authorize-slack-workspace.html#authorize-multiple-accounts) to use the AWS Support App.
+  * Call the [`RegisterSlackWorkspaceForOrganization`](https://docs.aws.amazon.com/supportapp/latest/APIReference/API_RegisterSlackWorkspaceForOrganization.html) API operation to register a Slack workspace for your account. The CloudFormation stack calls this API operation for you.
@@ -31 +31 @@ You can choose whether to use CloudFormation templates or not. If you don't use
-  * Call the [RegisterSlackWorkspaceForOrganization](https://docs.aws.amazon.com/supportapp/latest/APIReference/API_RegisterSlackWorkspaceForOrganization.html) API operation to register a Slack workspace for your account. The CloudFormation stack calls this API operation for you.
+  * Create an IAM role with the required permissions for each member account.
@@ -32,0 +33 @@ You can choose whether to use CloudFormation templates or not. If you don't use
+  * Call the [`CreateSlackChannelConfiguration`](https://docs.aws.amazon.com/supportapp/latest/APIReference/API_CreateSlackChannelConfiguration.html) API operation to configure a Slack channel for each member account.
@@ -35,0 +37,3 @@ You can choose whether to use CloudFormation templates or not. If you don't use
+
+For detailed manual steps, see [Authorize multiple accounts](./authorize-slack-workspace.html#authorize-multiple-accounts).
+