AWS quick documentation change
Summary
Added documentation for the 'quicksight:DeleteAccountSubscription' IAM permission required for account termination and clarified permissions needed for the DeleteAccountSubscription API.
Security assessment
The change explicitly documents required IAM permissions for account termination operations, which is a security best practice. It clarifies that both 'quicksight:Unsubscribe' and 'quicksight:DeleteAccountSubscription' permissions are needed to avoid AccessDeniedException errors. While this enhances security documentation, there is no evidence of addressing a specific vulnerability.
Diff
diff --git a/quick/latest/userguide/manage-qs-account-settings.md b/quick/latest/userguide/manage-qs-account-settings.md index 1414077c8..b0be5203a 100644 --- a//quick/latest/userguide/manage-qs-account-settings.md +++ b//quick/latest/userguide/manage-qs-account-settings.md @@ -80,0 +81,2 @@ You need the following special permissions to terminate a Amazon Quick account. + * `quicksight:DeleteAccountSubscription` + @@ -88,0 +91,4 @@ You need the following special permissions to terminate a Amazon Quick account. +###### Note + +The `DeleteAccountSubscription` Amazon Quick API requires both `quicksight:Unsubscribe` and `quicksight:DeleteAccountSubscription` IAM permissions. An explicit deny on either permission results in an `AccessDeniedException`. +