Skip to main content

Updating Access Permissions for SurePath AI's CloudFormation Stack

Walks through updating CloudFormation stack for AWS connector (S3 telemetry, Bedrock, Knowledge Bases). Covers template replacement, S3 verification, and IAM permissions.

Overview

F5 SurePath AI takes a minimalist approach to the permissions it asks customers to grant: typically only enough to enable the features currently in production.

As SurePath AI adds features and functionality, permission updates are sometimes required. This document walks through how to apply them.

Connector - AWS CloudFormation Stack

This connector creates and accesses S3 buckets to store telemetry (see Configuring telemetry destinations) and Bedrock Foundational models (see Enable AWS Bedrock foundation models).

Prerequisites

  • Admin access to the AWS account where the access will be updated

  • The update URL from the SurePath AI technical support team

AWS

Step 1: Access CloudFormation on AWS

  • Connect to the AWS account and access the CloudFormation screen

  • Select the surepath-connector and click Update

Step 2: Replace the template

  • Select Replace existing template

  • Paste the URL provided by the SurePath AI support team into the Amazon S3 URL field.

  • Click Next

Step 3: Verify S3 bucket details

  • Do not remove the S3 bucket that was created, or user activity logs may stop being received.

  • Verify that the BucketSuffix matches the S3 bucket created by the original template.

  • These should match by default and not need to be changed.

  • Click Next when verified.

Step 4: Acknowledge

  • Select Acknowledge

  • Click Next

Step 5: Review and Submit

  • Review the changes listed in the Changes window. This varies depending on what needs to be done.

  • Submit the form.

Did this answer your question?