AWS finspace documentation change

Service: finspace · 2026-05-31 · Documentation low

File: finspace/latest/userguide/setting-up-for-amazon-finspace.md

Summary

Added new sections for AWS account signup and optional managed policy attachment for FinSpace environment creation, including a FinSpace managed policy JSON example

Security assessment

The change adds documentation about IAM permissions required for FinSpace environment creation, including a managed policy example. While this relates to security best practices (permissions management), there's no evidence it addresses a specific security vulnerability. The policy example shows broad permissions (finspace:* on all resources) which could introduce security risks if misconfigured.

Diff

diff --git a/finspace/latest/userguide/setting-up-for-amazon-finspace.md b/finspace/latest/userguide/setting-up-for-amazon-finspace.md
index e287fa770..3e68319bb 100644
--- a//finspace/latest/userguide/setting-up-for-amazon-finspace.md
+++ b//finspace/latest/userguide/setting-up-for-amazon-finspace.md
@@ -6,0 +7,2 @@
+Sign up for an AWS account(Optional) Attach managed policies for creating FinSpace environment
+
@@ -19 +21,3 @@ An Amazon FinSpace environment is created from an AWS account. In this section,
-  * [Sign up for Amazon Web Services](./sign-up-for-aws.html)
+  * Sign up for an AWS account
+
+  * (Optional) Attach managed policies for creating FinSpace environment
@@ -27,0 +32,36 @@ An Amazon FinSpace environment is created from an AWS account. In this section,
+## Sign up for an AWS account
+
+To get started with AWS, you need an AWS account. For information about creating an AWS account, see [Getting started with an AWS account](https://docs.aws.amazon.com//accounts/latest/reference/getting-started.html) in the _AWS Account Management Reference Guide_.
+
+## (Optional) Attach managed policies for creating FinSpace environment
+
+To create a FinSpace environment, the user performing the actions must have IAM permissions for `AdministratorAccess` or must have the FinSpace managed policy attached to their role. This step is optional if the user has `AdministratorAccess` permissions. Create and attach FinSpace managed policies to the account you used to create the FinSpace environment. These policies grant permissions to create the FinSpace environment and superusers in an AWS account.
+
+  1. Create a managed policy on the JSON tab for FinSpace. For more information, see [Creating policies on the JSON tab](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_create-console.html#access_policies_create-json-editor).
+
+  2. Use the following managed policy:
+
+
+
+
+JSON
+    
+
+****
+    
+    
+    
+    {
+        "Version":"2012-10-17",
+        "Statement": [
+            {
+                "Effect": "Allow",
+                "Action": [
+                    "finspace:*"
+                ],
+                "Resource": "*"
+            }
+        ]
+    }
+    
+
@@ -36 +76 @@ Getting started
-Sign up for AWS
+Create an environment