Using Service-Linked Roles for AWS Chatbot - AWS Chatbot

Using Service-Linked Roles for AWS Chatbot

A service-linked role is a type of IAM role that links directly to an AWS service. It gives AWS services the permissions to access resources in other services to complete actions on your behalf.

For information about other services that support service-linked roles, see AWS Services That Work with IAM and look for the services that have Yes in the Service-Linked Role column. Choose any Yes entry with a link to view the service-linked role documentation for that service.

When you create an AWS Chatbot resource in the AWS Chatbot console, you can also choose to provide a list of one or more SNS topics to associate with the new resource. AWS Chatbot automatically uses the AWSServiceRoleForAWSChatbot service-linked role to add or remove subscriptions to the AWS Chatbot global Amazon SNS subscription endpoint.

The service-linked role makes setting up AWS Chatbot easier because you don’t have to manually add the necessary permissions. AWS Chatbot defines the permissions for the service-linked role and only AWS Chatbot can assume that role. The permissions include a trust policy and a permissions policy, which apply only to the AWS Chatbot service.