AWS notifications documentation change
Summary
Added clarification that AWS User Notifications does not have service-specific AWS managed policies, but its actions are included in AdministratorAccess and ReadOnlyAccess policies, and referenced the resource-level permissions page for examples.
Security assessment
The change updates documentation about AWS managed policies and IAM permissions for the service. It provides information about security features (managed policies) but does not address any specific security issue or vulnerability.
Diff
diff --git a/notifications/latest/userguide/security-iam-awsmanpolicy.md b/notifications/latest/userguide/security-iam-awsmanpolicy.md index 9926a0016..b7e5ba375 100644 --- a//notifications/latest/userguide/security-iam-awsmanpolicy.md +++ b//notifications/latest/userguide/security-iam-awsmanpolicy.md @@ -18,0 +19,11 @@ For more information, see [AWS managed policies](https://docs.aws.amazon.com/IAM +AWS User Notifications does not have service-specific AWS managed policies. However, User Notifications actions are included in the following AWS managed policies: + + * [**AdministratorAccess**](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_job-functions.html#jf_administrator) – Grants full access to all AWS services, including User Notifications. + + * [**ReadOnlyAccess**](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_job-functions.html#awsmp_readonlyaccess) – Grants read-only access to all AWS services, including User Notifications get and list actions. + + + + +For examples of identity-based policies specific to User Notifications, see [Resource-level permissions in AWS User Notifications](./resource-level-permissions.html). +