AWS awssupport documentation change
Summary
Replaced inline IAM policy example with reference to managed policy AWSSupportAppFullAccess
Security assessment
Improves security documentation by referencing maintained IAM policies, but doesn't address any specific security vulnerability.
Diff
diff --git a/awssupport/latest/user/support-app-permissions.md b/awssupport/latest/user/support-app-permissions.md index d2f69c449..fffc4d63f 100644 --- a//awssupport/latest/user/support-app-permissions.md +++ b//awssupport/latest/user/support-app-permissions.md @@ -75 +75,3 @@ This policy defines the actions that the role can take. For more information, se -You can attach the following example policy to your IAM role. This policy allows the role to have full permissions to all required actions for the AWS Support App. After you configure a Slack channel with the role, any user in your channel has the same permissions. +You can attach the `AWSSupportAppFullAccess` policy to your IAM role. This policy allows the role to have full permissions to all required actions for the AWS Support App. After you configure a Slack channel with the role, any user in your channel has the same permissions. + +To view the permissions for the `AWSSupportAppFullAccess` policy, see [AWSSupportAppFullAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSSupportAppFullAccess.html#AWSSupportAppFullAccess-json.html) in the _AWS Managed Policy Reference_. @@ -83,33 +84,0 @@ You can update the policy to remove a permission from the AWS Support App. -JSON - - -**** - - - - { - "Version":"2012-10-17", - "Statement": [ - { - "Effect": "Allow", - "Action": [ - "supportapp:GetSlackOauthParameters", - "supportapp:RedeemSlackOauthCode", - "supportapp:DescribeSlackChannels", - "supportapp:ListSlackWorkspaceConfigurations", - "supportapp:ListSlackChannelConfigurations", - "supportapp:CreateSlackChannelConfiguration", - "supportapp:DeleteSlackChannelConfiguration", - "supportapp:DeleteSlackWorkspaceConfiguration", - "supportapp:GetAccountAlias", - "supportapp:PutAccountAlias", - "supportapp:DeleteAccountAlias", - "supportapp:UpdateSlackChannelConfiguration", - "iam:ListRoles" - ], - "Resource": "*" - } - ] - } - -