AWS healthimaging documentation change
Summary
Updated service-linked roles support from 'No' to 'Yes', added note about DICOM Study/Series UID condition statements, corrected action prefix from 'AWS' to 'medical-imaging', and added CloudWatch metrics integration details
Security assessment
This change updates documentation to reflect that HealthImaging now supports service-linked roles for CloudWatch metrics publishing and adds information about DICOM UID-based condition statements for access control. The correction of the action prefix from 'AWS' to 'medical-imaging' fixes documentation accuracy but doesn't indicate a security issue. The addition of condition statement documentation enhances security feature documentation.
Diff
diff --git a/healthimaging/latest/devguide/security_iam_service-with-iam.md b/healthimaging/latest/devguide/security_iam_service-with-iam.md index 023b47a84..bfeb3d4cc 100644 --- a//healthimaging/latest/devguide/security_iam_service-with-iam.md +++ b//healthimaging/latest/devguide/security_iam_service-with-iam.md @@ -23 +23 @@ Service roles | Yes -Service-linked roles | No +Service-linked roles | Yes @@ -30,0 +31,2 @@ To get a high-level view of how HealthImaging and other AWS services work with m +HealthImaging supports condition statements that specify DICOM Study and Series UIDs, enabling access control scoped to one or more DICOM Study or Series. + @@ -60 +62 @@ Policy actions in HealthImaging use the following prefix before the action: - AWS + medical-imaging @@ -66,2 +68,2 @@ To specify multiple actions in a single statement, separate them with commas. - "AWS:action1", - "AWS:action2" + "medical-imaging:action1", + "medical-imaging:action2" @@ -156 +158 @@ Changing the permissions for a service role might break HealthImaging functional -**Supports service-linked roles:** No +**Supports service-linked roles:** Yes @@ -160 +162 @@ A service-linked role is a type of service role that is linked to an AWS service -For details about creating or managing service-linked roles, see [AWS services that work with IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html). Find a service in the table that includes a `Yes` in the **Service-linked role** column. Choose the **Yes** link to view the service-linked role documentation for that service. +HealthImaging uses service-linked roles to [publish CloudWatch metrics to your account](https://docs.aws.amazon.com/healthimaging/latest/devguide/monitoring-cloudwatch.html#setup-metrics). For details about creating or managing service-linked roles, see [AWS services that work with IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html).