Configuring baseline permissions for Jira Service Management Cloud - AWS Service Management Connector
Available template for baseline permissions

Configuring baseline permissions for Jira Service Management Cloud

This section describes how to configure AWS Identity and Access Management (IAM) permissions, AWS Service Catalog, and other AWS services to use AWS Service Management Connector for Jira Service Management Cloud.

Note

To align with best practices, AWS recommends periodically rotating IAM user access keys. For more information, refer to Manage access keys for IAM users.

Topics

Available template for baseline permissions

For an AWS CloudFormation template to configure Jira Service Management, refer to AWS commercial Regions and AWS GovCloud (US) Regions. For each AWS account, the connector for Jira Service Management requires two IAM users:

  • AWS Sync User: An IAM user to sync AWS resources (such as portfolios, products, Incident Manager Incidents, security Findings, and Automation Documents) to Jira.

  • AWS End User: An IAM user who can provision products and execute automation documents as an end user. This role includes any required roles to provision and execute.

These can be the same user, and can be an existing user. Service Management Connector recommends that you assign two new users for the Connector.

Note

The baseline AWS CloudFormation template creates the Sync User and End User with required permissions and configures the AWS account for all available integrations.