AWS AWSCloudFormation documentation change
Summary
Added extensive new capabilities to QuickSight custom permissions CloudFormation template, including numerous new connector actions (Amazon Bedrock, various third-party services), AI features, and sharing permissions.
Security assessment
This change adds documentation for new permission capabilities in QuickSight, which are security controls that allow administrators to restrict access to various features and connectors. The documentation explicitly describes granular permission controls for actions involving sensitive services (Amazon Bedrock, S3, third-party connectors) and data sharing capabilities. While this enhances security documentation by providing more granular control options, there is no evidence in the diff that this addresses a specific security vulnerability or incident.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-quicksight-custompermissions-capabilities.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-quicksight-custompermissions-capabilities.md index 7b8d1c642..e435153d9 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-quicksight-custompermissions-capabilities.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-quicksight-custompermissions-capabilities.md @@ -20,0 +21,4 @@ To declare this entity in your CloudFormation template, use the following syntax + "AmazonBedrockARSAction" : String, + "AmazonBedrockFSAction" : String, + "AmazonBedrockKRSAction" : String, + "AmazonSThreeAction" : String, @@ -21,0 +26,2 @@ To declare this entity in your CloudFormation template, use the following syntax + "ApproveFlowShareRequests" : String, + "AsanaAction" : String, @@ -22,0 +29,4 @@ To declare this entity in your CloudFormation template, use the following syntax + "BambooHRAction" : String, + "BoxAgentAction" : String, + "BuildCalculatedFieldWithQ" : String, + "CanvaAgentAction" : String, @@ -23,0 +34,14 @@ To declare this entity in your CloudFormation template, use the following syntax + "ComprehendAction" : String, + "ComprehendMedicalAction" : String, + "ConfluenceAction" : String, + "CreateAndUpdateAmazonBedrockARSAction" : String, + "CreateAndUpdateAmazonBedrockFSAction" : String, + "CreateAndUpdateAmazonBedrockKRSAction" : String, + "CreateAndUpdateAmazonSThreeAction" : String, + "CreateAndUpdateAsanaAction" : String, + "CreateAndUpdateBambooHRAction" : String, + "CreateAndUpdateBoxAgentAction" : String, + "CreateAndUpdateCanvaAgentAction" : String, + "CreateAndUpdateComprehendAction" : String, + "CreateAndUpdateComprehendMedicalAction" : String, + "CreateAndUpdateConfluenceAction" : String, @@ -26,0 +51,32 @@ To declare this entity in your CloudFormation template, use the following syntax + "CreateAndUpdateFactSetAction" : String, + "CreateAndUpdateGenericHTTPAction" : String, + "CreateAndUpdateGithubAction" : String, + "CreateAndUpdateGoogleCalendarAction" : String, + "CreateAndUpdateHubspotAction" : String, + "CreateAndUpdateHuggingFaceAction" : String, + "CreateAndUpdateIntercomAction" : String, + "CreateAndUpdateJiraAction" : String, + "CreateAndUpdateKnowledgeBases" : String, + "CreateAndUpdateLinearAction" : String, + "CreateAndUpdateMCPAction" : String, + "CreateAndUpdateMondayAction" : String, + "CreateAndUpdateMSExchangeAction" : String, + "CreateAndUpdateMSTeamsAction" : String, + "CreateAndUpdateNewRelicAction" : String, + "CreateAndUpdateNotionAction" : String, + "CreateAndUpdateOneDriveAction" : String, + "CreateAndUpdateOpenAPIAction" : String, + "CreateAndUpdatePagerDutyAction" : String, + "CreateAndUpdateSalesforceAction" : String, + "CreateAndUpdateSandPGlobalEnergyAction" : String, + "CreateAndUpdateSandPGMIAction" : String, + "CreateAndUpdateSAPBillOfMaterialAction" : String, + "CreateAndUpdateSAPBusinessPartnerAction" : String, + "CreateAndUpdateSAPMaterialStockAction" : String, + "CreateAndUpdateSAPPhysicalInventoryAction" : String, + "CreateAndUpdateSAPProductMasterDataAction" : String, + "CreateAndUpdateServiceNowAction" : String, + "CreateAndUpdateSharePointAction" : String, + "CreateAndUpdateSlackAction" : String, + "CreateAndUpdateSmartsheetAction" : String, + "CreateAndUpdateTextractAction" : String, @@ -28,0 +85 @@ To declare this entity in your CloudFormation template, use the following syntax + "CreateAndUpdateZendeskAction" : String, @@ -29,0 +87 @@ To declare this entity in your CloudFormation template, use the following syntax + "CreateDashboardExecutiveSummaryWithQ" : String, @@ -32,0 +91 @@ To declare this entity in your CloudFormation template, use the following syntax + "EditVisualWithQ" : String, @@ -38,0 +98,2 @@ To declare this entity in your CloudFormation template, use the following syntax + "Extension" : String, + "FactSetAction" : String, @@ -39,0 +101,5 @@ To declare this entity in your CloudFormation template, use the following syntax + "GenericHTTPAction" : String, + "GithubAction" : String, + "GoogleCalendarAction" : String, + "HubspotAction" : String, + "HuggingFaceAction" : String, @@ -40,0 +107,2 @@ To declare this entity in your CloudFormation template, use the following syntax + "IntercomAction" : String, + "JiraAction" : String, @@ -41,0 +110,11 @@ To declare this entity in your CloudFormation template, use the following syntax + "LinearAction" : String, + "ManageSharedFolders" : String, + "MCPAction" : String, + "MondayAction" : String, + "MSExchangeAction" : String, + "MSTeamsAction" : String, + "NewRelicAction" : String, + "NotionAction" : String, + "OneDriveAction" : String, + "OpenAPIAction" : String, + "PagerDutyAction" : String, @@ -46,0 +126,13 @@ To declare this entity in your CloudFormation template, use the following syntax + "SalesforceAction" : String, + "SandPGlobalEnergyAction" : String, + "SandPGMIAction" : String, + "SAPBillOfMaterialAction" : String, + "SAPBusinessPartnerAction" : String, + "SAPMaterialStockAction" : String, + "SAPPhysicalInventoryAction" : String, + "SAPProductMasterDataAction" : String, + "ServiceNowAction" : String, + "ShareAmazonBedrockARSAction" : String, + "ShareAmazonBedrockFSAction" : String, + "ShareAmazonBedrockKRSAction" : String, + "ShareAmazonSThreeAction" : String, @@ -47,0 +140,7 @@ To declare this entity in your CloudFormation template, use the following syntax + "ShareAsanaAction" : String, + "ShareBambooHRAction" : String, + "ShareBoxAgentAction" : String, + "ShareCanvaAgentAction" : String, + "ShareComprehendAction" : String, + "ShareComprehendMedicalAction" : String, + "ShareConfluenceAction" : String, @@ -50,0 +150,36 @@ To declare this entity in your CloudFormation template, use the following syntax + "ShareFactSetAction" : String, + "ShareGenericHTTPAction" : String, + "ShareGithubAction" : String, + "ShareGoogleCalendarAction" : String, + "ShareHubspotAction" : String, + "ShareHuggingFaceAction" : String, + "ShareIntercomAction" : String, + "ShareJiraAction" : String, + "ShareKnowledgeBases" : String, + "ShareLinearAction" : String, + "ShareMCPAction" : String, + "ShareMondayAction" : String, + "ShareMSExchangeAction" : String, + "ShareMSTeamsAction" : String, + "ShareNewRelicAction" : String, + "ShareNotionAction" : String, + "ShareOneDriveAction" : String, + "ShareOpenAPIAction" : String, + "SharePagerDutyAction" : String, + "SharePointAction" : String, + "ShareSalesforceAction" : String, + "ShareSandPGlobalEnergyAction" : String, + "ShareSandPGMIAction" : String, + "ShareSAPBillOfMaterialAction" : String, + "ShareSAPBusinessPartnerAction" : String, + "ShareSAPMaterialStockAction" : String, + "ShareSAPPhysicalInventoryAction" : String, + "ShareSAPProductMasterDataAction" : String, + "ShareServiceNowAction" : String, + "ShareSharePointAction" : String, + "ShareSlackAction" : String, + "ShareSmartsheetAction" : String, + "ShareTextractAction" : String, + "ShareZendeskAction" : String, + "SlackAction" : String, + "SmartsheetAction" : String, @@ -52,0 +188,2 @@ To declare this entity in your CloudFormation template, use the following syntax + "TextractAction" : String, + "Topic" : String, @@ -53,0 +191,6 @@ To declare this entity in your CloudFormation template, use the following syntax + "UseAmazonBedrockARSAction" : String, + "UseAmazonBedrockFSAction" : String, + "UseAmazonBedrockKRSAction" : String, + "UseAmazonSThreeAction" : String, + "UseAsanaAction" : String, + "UseBambooHRAction" : String, @@ -55 +198,39 @@ To declare this entity in your CloudFormation template, use the following syntax - "ViewAccountSPICECapacity" : String + "UseBoxAgentAction" : String, + "UseCanvaAgentAction" : String, + "UseComprehendAction" : String, + "UseComprehendMedicalAction" : String, + "UseConfluenceAction" : String, + "UseFactSetAction" : String, + "UseGenericHTTPAction" : String, + "UseGithubAction" : String, + "UseGoogleCalendarAction" : String, + "UseHubspotAction" : String, + "UseHuggingFaceAction" : String, + "UseIntercomAction" : String, + "UseJiraAction" : String, + "UseLinearAction" : String, + "UseMCPAction" : String, + "UseMondayAction" : String, + "UseMSExchangeAction" : String, + "UseMSTeamsAction" : String, + "UseNewRelicAction" : String, + "UseNotionAction" : String, + "UseOneDriveAction" : String, + "UseOpenAPIAction" : String, + "UsePagerDutyAction" : String, + "UseSalesforceAction" : String, + "UseSandPGlobalEnergyAction" : String, + "UseSandPGMIAction" : String, + "UseSAPBillOfMaterialAction" : String, + "UseSAPBusinessPartnerAction" : String, + "UseSAPMaterialStockAction" : String, + "UseSAPPhysicalInventoryAction" : String, + "UseSAPProductMasterDataAction" : String, + "UseServiceNowAction" : String, + "UseSharePointAction" : String, + "UseSlackAction" : String,