AWS cost-management documentation change
Summary
Removed iam:CreateServiceLinkedRole permission requirement and updated link from service-linked role documentation to execution role permissions documentation
Security assessment
This change updates documentation to reflect the transition from service-linked roles to execution roles with specific permissions. This improves security posture by implementing least privilege, but there's no evidence of a specific security issue being addressed.
Diff
diff --git a/cost-management/latest/userguide/schedule-dashboard-reports.md b/cost-management/latest/userguide/schedule-dashboard-reports.md index 60b7dd6c2..cd58b8b8c 100644 --- a//cost-management/latest/userguide/schedule-dashboard-reports.md +++ b//cost-management/latest/userguide/schedule-dashboard-reports.md @@ -17 +17 @@ When changes are made to a dashboard, they are automatically reflected in subseq -To schedule email delivery, you need permissions for `bcm-dashboards:CreateScheduledReport` and `iam:CreateServiceLinkedRole`. +To schedule email delivery, you need permissions for `bcm-dashboards:CreateScheduledReport`. @@ -25 +25 @@ AWS User Notifications is automatically configured in your account, including No - * [Service-linked role for scheduled reports](./schedule-dashboard-reports-slr.html) + * [Execution role permissions for scheduled reports](./schedule-dashboard-reports-permissions.html) @@ -44 +44 @@ Exporting dashboards -Service-linked role for scheduled reports +Execution role permissions for scheduled reports