AWS Security ChangesHomeSearch

AWS awssupport documentation change

Service: awssupport · 2026-07-10 · Documentation low

File: awssupport/latest/user/support-app-permissions.md

Summary

Replaced inline IAM policy example with reference to managed policy AWSSupportAppFullAccess

Security assessment

Improves security documentation by referencing maintained IAM policies, but doesn't address any specific security vulnerability.

Diff

diff --git a/awssupport/latest/user/support-app-permissions.md b/awssupport/latest/user/support-app-permissions.md
index d2f69c449..fffc4d63f 100644
--- a//awssupport/latest/user/support-app-permissions.md
+++ b//awssupport/latest/user/support-app-permissions.md
@@ -75 +75,3 @@ This policy defines the actions that the role can take. For more information, se
-You can attach the following example policy to your IAM role. This policy allows the role to have full permissions to all required actions for the AWS Support App. After you configure a Slack channel with the role, any user in your channel has the same permissions.
+You can attach the `AWSSupportAppFullAccess` policy to your IAM role. This policy allows the role to have full permissions to all required actions for the AWS Support App. After you configure a Slack channel with the role, any user in your channel has the same permissions.
+
+To view the permissions for the `AWSSupportAppFullAccess` policy, see [AWSSupportAppFullAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSSupportAppFullAccess.html#AWSSupportAppFullAccess-json.html) in the _AWS Managed Policy Reference_.
@@ -83,33 +84,0 @@ You can update the policy to remove a permission from the AWS Support App.
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version":"2012-10-17",
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Action": [
-                    "supportapp:GetSlackOauthParameters",
-                    "supportapp:RedeemSlackOauthCode",
-                    "supportapp:DescribeSlackChannels",
-                    "supportapp:ListSlackWorkspaceConfigurations",
-                    "supportapp:ListSlackChannelConfigurations",
-                    "supportapp:CreateSlackChannelConfiguration",
-                    "supportapp:DeleteSlackChannelConfiguration",
-                    "supportapp:DeleteSlackWorkspaceConfiguration",
-                    "supportapp:GetAccountAlias",
-                    "supportapp:PutAccountAlias",
-                    "supportapp:DeleteAccountAlias",
-                    "supportapp:UpdateSlackChannelConfiguration",
-                    "iam:ListRoles"
-                ],
-                "Resource": "*"
-            }
-        ]
-    }
-    
-