AWS managed policies for AWS Support App in Slack - AWS Support
AWSSupportAppFullAccessAWSSupportAppReadOnlyAccessPolicy updates

AWS managed policies for AWS Support App in Slack

Note

To access and view support cases in the AWS Support Center Console, see Manage access to AWS Support Center.

AWS Support App has the following managed policies.

AWS managed policy: AWSSupportAppFullAccess

You can use the AWSSupportAppFullAccess managed policy to grant the IAM role the permissions to your Slack channel configurations. You can also attach the AWSSupportAppFullAccess policy to your IAM entities.

For more information, see AWS Support App in Slack.

This policy grants permissions that allow the entity to perform AWS Support, Service Quotas, and IAM actions for the AWS Support App.

Permissions details

This policy includes the following permissions:

  • servicequotas – Describes your existing service quotas and requests, and creates service quota increases for your account.

  • support – Creates, updates, and resolves your support cases. Updates and describes information about your cases, such as file attachments, correspondences, and severity levels. Initiates live chat sessions with a support agent.

  • iam – Creates a service-linked role for Service Quotas.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "servicequotas:GetRequestedServiceQuotaChange",
                "servicequotas:GetServiceQuota",
                "servicequotas:RequestServiceQuotaIncrease",
                "support:AddAttachmentsToSet",
                "support:AddCommunicationToCase",
                "support:CreateCase",
                "support:DescribeCases",
                "support:DescribeCommunications",
                "support:DescribeSeverityLevels",
                "support:InitiateChatForCase",
                "support:ResolveCase"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": "iam:CreateServiceLinkedRole",
            "Resource": "*",
            "Condition": {
                "StringEquals": {"iam:AWSServiceName": "servicequotas.amazonaws.com"}
            }
        }
    ]
}

For more information, see Managing access to the AWS Support App.

AWS managed policy: AWSSupportAppReadOnlyAccess

The AWSSupportAppReadOnlyAccess policy grants permissions that allow the entity to perform read-only AWS Support App actions. For more information, see AWS Support App in Slack.

Permissions details

This policy includes the following permissions:

  • support – Describes support case details and communications added to the support cases.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "support:DescribeCases",
                "support:DescribeCommunications"
            ],
            "Resource": "*"
        }
    ]
}

AWS Support App updates to AWS managed policies

View details about updates to AWS managed policies for AWS Support App since this service began tracking these changes. For automatic alerts about changes to this page, subscribe to the RSS feed on the Document history page.

The following table describes important updates to the AWS Support App managed policies since August 17, 2022.

AWS Support App
Change Description Date

AWSSupportAppFullAccess and AWSSupportAppReadOnlyAccess

New AWS managed policies for the AWS Support App

You can use these policies for the IAM role that you configure for your Slack channel configuration.

For more information, see Managing access to the AWS Support App.

August 19, 2022

Change log published

Change log for the AWS Support App managed policies.

August 19, 2022