AWS security-ir medium security documentation change

Service: security-ir · 2026-05-10 · Security-related medium

File: security-ir/latest/userguide/organizations_permissions.md

Summary

Added 'iam:CreateServiceLinkedRole' and 'iam:GetPolicy' permissions and updated section titles.

Security assessment

Explicitly documents required IAM permissions for automatic service-linked role creation (critical for Proactive Response feature). Missing permissions could break threat detection capabilities.

Diff

diff --git a/security-ir/latest/userguide/organizations_permissions.md b/security-ir/latest/userguide/organizations_permissions.md
index 37e38e723..00288f0f2 100644
--- a//security-ir/latest/userguide/organizations_permissions.md
+++ b//security-ir/latest/userguide/organizations_permissions.md
@@ -33 +33,3 @@ To grant these permissions, include the following statement in an AWS Identity a
-                    "organizations:ListAccounts"
+                    "organizations:ListAccounts",
+                    "iam:CreateServiceLinkedRole",
+                    "iam:GetPolicy"
@@ -67 +69 @@ Trusted access
-Designating a delegated administrator AWS Security Incident Response
+Managing membership with organizational units (OUs)