AWS solutions documentation change
Summary
Expanded Race Facilitator permissions to include live race management, viewing/downloading other users' models, and added new 'Live races' permissions table
Security assessment
The changes document enhanced access controls for Race Facilitator role (viewing/downloading others' models) and new live race management permissions. While this clarifies security boundaries, there's no evidence of addressing a specific vulnerability.
Diff
diff --git a/solutions/latest/deepracer-on-aws/types-of-users.md b/solutions/latest/deepracer-on-aws/types-of-users.md index ecf673032..21e0b8e48 100644 --- a//solutions/latest/deepracer-on-aws/types-of-users.md +++ b//solutions/latest/deepracer-on-aws/types-of-users.md @@ -15 +15 @@ Racers can be promoted by an admin to either a race facilitator or to an admin ( -**Race facilitators** are users who have been given elevated permissions by the admin of a deployment to help with creating and managing races. Race facilitators inherit the same permissions as racers, allowing them to also create, train, and evaluate models, and submit them to community races. Admins can also perform the same functions as a race facilitator, allowing them to create and manage races, in addition to having their own elevated privileges. +**Race facilitators** are users who have been given elevated permissions by the admin of a deployment to help with creating and managing races, including facilitating live race events — launching evaluations, managing the queue, controlling submissions, and declaring winners. Race facilitators can also view all users' trained models and download physical car models for loading onto vehicles at physical race events. Race facilitators inherit the same permissions as racers, allowing them to also create, train, and evaluate models, and submit them to community races. Admins can also perform the same functions as a race facilitator, allowing them to create and manage races, in addition to having their own elevated privileges. @@ -31,0 +32,2 @@ Delete own model | ✓ | ✓ | ✓ +View another user’s models | ✗ | ✓ | ✓ +Download another user’s physical car model | ✗ | ✓ | ✓ @@ -38,0 +41,9 @@ Delete race | ✗ | ✓ | ✓ +****Live races** ** +Watch live race | ✓ | ✓ | ✓ +Submit model to live race | ✓ | ✓ | ✓ +Launch evaluation | ✗ | ✓ | ✓ +Manage queue (reorder, remove, reset) | ✗ | ✓ | ✓ +Toggle autolaunch | ✗ | ✓ | ✓ +Open/close submissions | ✗ | ✓ | ✓ +Declare winner | ✗ | ✓ | ✓ +Clear leaderboard | ✗ | ✓ | ✓