Skip to content

docs: add Data Sources tab permission callout and fix BYOC anchor #108

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
mintlify wants to merge 1 commit into
base: main
Choose a base branch
from
Open

docs: add Data Sources tab permission callout and fix BYOC anchor #108

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion products/bring-your-own-cloud/reference/privilege.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ description: 'Deploy ClickHouse on your own cloud infrastructure'
doc_type: 'reference'
---

## CloudFormation IAM roles {#cloudformation-iam-roles}
## AWS IAM roles {#aws-iam-roles}

### Bootstrap IAM role {#bootstrap-iam-role}

Expand Down
2 changes: 1 addition & 1 deletion products/cloud/guides/security/audit-logging/byoc-security-playbook.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ FROM clusterAllReplicas('default',system.crash_log)

ClickHouse utilizes pre-created roles to enable system functions. This section assumes the customer is using AWS with CloudTrail and has access to the CloudTrail logs.

If an incident may be the result of a compromised role, review activities in CloudTrail and CloudWatch related to the ClickHouse IAM roles and actions. Refer to the [CloudFormation](/products/bring-your-own-cloud/reference/privilege#cloudformation-iam-roles) stack or Terraform module provided as part of setup for a list of IAM roles.
If an incident may be the result of a compromised role, review activities in CloudTrail and CloudWatch related to the ClickHouse IAM roles and actions. Refer to the [CloudFormation](/products/bring-your-own-cloud/reference/privilege#aws-iam-roles) stack or Terraform module provided as part of setup for a list of IAM roles.

## Unauthorized access to EKS cluster {#unauthorized-access-eks-cluster}

Expand Down
4 changes: 4 additions & 0 deletions products/cloud/guides/security/cloud-access-management/manage-custom-roles.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -55,6 +55,10 @@ Click the `Allow` button and select from Organization, Service, and/or Database
Ensure users who will log into the console have a minimum of Organization > Access organization permissions.
</Tip>

<Note>
**Data Sources tab access**: To access the **Data Sources** tab, the role currently requires the `Manage and Delete Selected Services` permission.
</Note>

<Image img="/images/cloud/guides/control_plane/manage_custom_roles/5_custom_role.png" size="md"/>
</Step>
<Step>
Expand Down
2 changes: 1 addition & 1 deletion products/cloud/reference/security/console-roles.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -76,7 +76,7 @@ The table below describes the ClickHouse console and SQL console permissions. Mo
| control-plane:service:view-private-endpoints | View private endpoint configuration for a service. |
| control-plane:service:manage-private-endpoints | Create and manage private endpoints and private networking. |
| **ClickPipes** ([more info](/integrations/clickpipes/home)) | ClickPipes integration |
| control-plane:service:manage-clickpipes | Manage ClickPipes integration and related settings. |
| control-plane:service:manage-clickpipes | Manage ClickPipes integration and related settings. Accessing the **Data Sources** tab currently requires `control-plane:service:manage` ("Manage and Delete Selected Services"). |
| **Scaling** ([more info](/products/cloud/features/autoscaling/overview)) | Scaling and autoscaling configuration |
| control-plane:service:view-scaling-config | View scaling configuration and autoscaling settings for a service. |
| control-plane:service:manage-scaling-config | Modify scaling configuration and trigger scaling operations. |
Expand Down