AWS solutions documentation change

Service: solutions · 2026-04-22 · Documentation low

File: solutions/latest/deepracer-on-aws/types-of-users.md

Summary

Added comprehensive permissions matrix detailing capabilities for Racer, Race Facilitator, and Admin roles across models, community races, profiles, usage, user management, and instance management.

Security assessment

The change documents security features by explicitly defining role-based access control (RBAC) permissions. It clarifies what actions each user role can perform, which helps administrators understand and implement the principle of least privilege. This is security documentation but not addressing a specific security issue.

Diff

diff --git a/solutions/latest/deepracer-on-aws/types-of-users.md b/solutions/latest/deepracer-on-aws/types-of-users.md
index 169153c46..ecf673032 100644
--- a//solutions/latest/deepracer-on-aws/types-of-users.md
+++ b//solutions/latest/deepracer-on-aws/types-of-users.md
@@ -6,0 +7,2 @@
+Permissions matrix
+
@@ -17 +19,47 @@ Racers can be promoted by an admin to either a race facilitator or to an admin (
-![AWS DeepRacer Instance Management](/images/solutions/latest/deepracer-on-aws/images/deepracer_instance_management.png)
+## Permissions matrix
+
+Capability | Racer | Race Facilitator | Admin  
+---|---|---|---  
+****Models — Own** **  
+Create and train own model |  ✓ |  ✓ |  ✓  
+Evaluate own model |  ✓ |  ✓ |  ✓  
+Clone own model |  ✓ |  ✓ |  ✓  
+Import own model |  ✓ |  ✓ |  ✓  
+Export own virtual model |  ✓ |  ✓ |  ✓  
+Export own physical car model |  ✓ |  ✓ |  ✓  
+Delete own model |  ✓ |  ✓ |  ✓  
+****Models — Other users** **  
+Delete another user’s model(s) |  ✗ |  ✗ |  ✓  
+****Community races** **  
+View race and leaderboard |  ✓ |  ✓ |  ✓  
+Enter open race |  ✓ |  ✓ |  ✓  
+Create race |  ✗ |  ✓ |  ✓  
+Edit race |  ✗ |  ✓ |  ✓  
+Delete race |  ✗ |  ✓ |  ✓  
+****Profiles — Own** **  
+View own profile |  ✓ |  ✓ |  ✓  
+Edit own profile |  ✓ |  ✓ |  ✓  
+Delete own profile |  ✓ |  ✓ |  ✓  
+****Profiles — Other users** **  
+View all profiles |  ✗ |  ✗ |  ✓  
+View number of users |  ✗ |  ✗ |  ✓  
+Delete another user’s profile |  ✗ |  ✗ |  ✓  
+****Usage - Own** **  
+View own model count |  ✓ |  ✓ |  ✓  
+View own compute usage |  ✓ |  ✓ |  ✓  
+****User management** **  
+Update another user’s role |  ✗ |  ✗ |  ✓  
+View another user’s basic profile attributes |  ✗ |  ✗ |  ✓  
+View another user’s current compute usage |  ✗ |  ✗ |  ✓  
+View another user’s queued compute usage |  ✗ |  ✗ |  ✓  
+View another user’s model storage |  ✗ |  ✗ |  ✓  
+Update another user’s compute usage limit |  ✗ |  ✗ |  ✓  
+Update another user’s model limit |  ✗ |  ✗ |  ✓  
+****Instance management** **  
+Update the default compute usage limit for new users |  ✗ |  ✗ |  ✓  
+Update the default model count limit for new users |  ✗ |  ✗ |  ✓  
+Update the global compute usage limit |  ✗ |  ✗ |  ✓  
+Update the global model count limit |  ✗ |  ✗ |  ✓  
+View global model count |  ✗ |  ✗ |  ✓  
+View global storage usage |  ✗ |  ✗ |  ✓  
+View global compute usage |  ✗ |  ✗ |  ✓