View a markdown version of this page

Amazon managed policies for Amazon Quick - Amazon Quick
AmazonQuickSuiteAccessPolicyPolicy updates
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Amazon managed policies for Amazon Quick

Amazon Quick Free, Plus, and Max accounts use an Amazon managed policy so that Amazon Quick can operate on your behalf. Amazon services maintain and update Amazon managed policies. You can't change the permissions in Amazon managed policies. For more information about Amazon managed policies, see Amazon managed policies in the IAM User Guide.

Amazon managed policy: AmazonQuickSuiteAccessPolicy

The AmazonQuickSuiteAccessPolicy Amazon managed policy applies only to Amazon Quick Free, Plus, and Max accounts. Amazon Quick uses this policy to manage its IAM Identity Center application, identity store users and groups, user subscriptions, and Amazon Quick resources for these accounts.

Amazon Quick automatically creates the AmazonQuickSuiteAccessRole service role, attaches this policy to it, and uses it on your behalf. You don't need to configure, attach, or manage this policy yourself.

Important

This policy is intended only for use by the Amazon Quick service. Don't attach AmazonQuickSuiteAccessPolicy to your own IAM users, groups, or roles.

With Amazon Quick, sensitive operations are tightly scoped: token runtime actions are limited to your IAM Identity Center applications, sign-in token creation is restricted to resources in your own account, and role assumption and role passing are limited to the dedicated AmazonQuickSuiteAccessRole in your account.

Permissions details

This policy includes the following permissions:

  • quicksight – Lets Amazon Quick use all Amazon Quick actions to create, read, update, and delete Amazon Quick resources, such as dashboards, analyses, datasets, data sources, and users, on your behalf.

  • identitystore – Lets Amazon Quick read and manage the users and groups in your IAM Identity Center identity store, including looking up, creating, updating, and deleting users and groups and resolving their identifiers and group memberships.

  • sso – Lets Amazon Quick discover your IAM Identity Center instance and manage its own Identity Center application end to end, including creating, updating, describing, and deleting the application; configuring its authentication method, grants, and access scopes; managing user and group assignments; and associating or disassociating profiles.

  • sso-oauth – Lets Amazon Quick create, inspect, and revoke OAuth tokens through IAM Identity Center to authenticate requests and manage sessions for signed-in users. This access is scoped to IAM Identity Center application resources.

  • signin – Lets Amazon Quick create an OAuth 2.0 token that is used in the sign-in flow for your users. This access is restricted by a condition to resources in your own account.

  • sts – Lets Amazon Quick assume a role, set session context, and tag the session to obtain temporary credentials to act on your behalf. This access is limited to the dedicated AmazonQuickSuiteAccessRole in your own account.

  • iam – Lets Amazon Quick pass a role to Amazon services as part of its operations. This access is restricted to the dedicated AmazonQuickSuiteAccessRole in your own account.

  • user-subscriptions – Lets Amazon Quick manage your subscription plan and the per-user claims associated with it, including reading your current plan, previewing plan changes, configuring overage behavior, and creating or updating claims.

  • organizations – Lets Amazon Quick read your Amazon Organizations configuration to determine your organization context and confirm which Amazon services have trusted access enabled. This access is read-only.

To view the AmazonQuickSuiteAccessPolicy, see AmazonQuickSuiteAccessPolicy in the Amazon Managed Policy reference.

Amazon Quick updates to Amazon managed policies

View details about updates to Amazon managed policies for Amazon Quick since this service began tracking these changes. For automatic alerts about changes to this page, subscribe to the RSS feed on the Amazon Quick Document History page.

Change Description Date

AmazonQuickSuiteAccessPolicy – New policy

Amazon Quick added a new Amazon managed policy that lets Amazon Quick manage its IAM Identity Center application, identity store users and groups, user subscriptions, and Amazon Quick resources on your behalf.

October 12, 2026