Does granting a user AWSSupportAccess implicitly grant that user an ability to make changes to the AWS account via and AWS support agent?
Looking to know what the process/scope of an AWS support agent is in responding to support requests. If I delegate access to a user so they can utilise AWS support services, am I creating a pathway for that user to make changes to the AWS account via a support request that is beyond that user's authority?
You are able to control access for users with AWS Identity and Access Management (IAM).
Here are a couple of resources to help:
Our Support team is also on hand to assist you directly with this and any further questions you may have, so feel free to reach out:
Do you have any particular actions in mind? which you believe the user shouldn't be able to do, but support team would?
Premium Support engineers will not be making any mutable actions on your account (like starting or terminating instances), but they have tools and resources to troubleshoot and advise on best practices. Billing&account customer service teams will not be changing any account information either, but they will provide guidance on how you can edit your accounts on your side as a customer (with the relevant permissions)... things like - adding/updating alternate contacts, changing credit card information, updating billing preferrences, editing account names/emails etc... you'd have to change this on your account yourself.
If you don't have relevant permissions to make those changes on the account, the support team may advise which permissions you're lacking. For example, let's say you don't have IAM permissions to view billing, but you submit support case requesting information about billing on the account, the support team shouldn't provide this information to you but should rather advise to contact an account admin or ask someone in your organization with the permissions to share this information with you.
Block suspicious(specific) user-agent using AWS WAFAccepted Answerasked 3 months ago
How to find out the original creator of an AWS accountasked 2 months ago
AWS SDK for Go V2 - Add user agent to the AWS clientasked 5 months ago
Get input from agent before placing an outbound callasked 3 months ago
How to make Agent Handoff in AWS Connect using Lex chatbot?asked 3 months ago
Tasks assigned to an unavailable agent are lost.Accepted Answerasked a month ago
DataSync Agent -- What user does it run as?Accepted Answerasked 2 years ago
Is there an AWS service that can codelessly, serverlessly download an external file via HTTPS to an S3 bucket?asked 20 days ago
Does granting a user AWSSupportAccess implicitly grant that user an ability to make changes to the AWS account via and AWS support agent?asked 2 months ago
AWS CloudWatch agent configurationAccepted Answerasked a year ago