Configuring commands support on an existing chat channel in AWS Chatbot - AWS Chatbot

Configuring commands support on an existing chat channel in AWS Chatbot

If you have existing chat channels using the AWS Chatbot, you can reconfigure them in a few steps to support the AWS CLI.

  1. Open the AWS Chatbot console.

  2. In the Configured Clients page, select the chat client. If you have only one, its contents (the list of chat channels) appear on the page.

    Note

    In this procedure, we assume use of an existing AWS Chatbot chat channel configuration. The process is very similar if you need to create a new chat client configuration by choosing Configure new client.

  3. Choose a channel from the Configured channels list, and choose Edit. The selected channel can be public or private.

  4. Define your Role setting by choosing a Channel role or User roles. For more information about role types, see Role setting:

    Channel role

    1. For Role setting, choose Channel role.

    2. For Channel role, choose Create new role. If you want to use an existing role instead, choose Use an existing role. To use an existing IAM role, you will need to modify it for use with AWS Chatbot. For more information, see Configuring an IAM Role for AWS Chatbot.

    3. For Role name, enter a name. Valid characters: a-z, A-Z, 0-9, .\w+=,.@-_.

    4. For Role policy template, choose Read Only command permissions and Lambda-Invoke command permissions.

      Note

      • If you plan to have users of the role submit AWS Support cases, also attach the AWS Support command permissions policy.

      • If you want the role to allow users to manage incidents, add the Incident Manager Permissions policy.

    User roles

    1. For Role setting, choose User roles.

  5. Select the policies that will make up your channel guardrail policies. Your channel guardrail policies control what actions are available to your channel members.

    Note

    If you initially had permission to run Lambda invoke, it is contained in All actions permitted.

    Note

    To run most CLI commands from your Slack channel, ensure you select All actions permitted.

    Note

    You do not need to edit or change the Amazon SNS topics configuration for the chat channel.

  6. Choose Save.

    You can use the IAM console to modify an existing IAM role. By simply attaching the three additional AWS Chatbot policies to the IAM role, users of that role can immediately begin using commands in the chat channel. To do so, see Configuring an IAM Role for AWS Chatbot.

Important

If you have a large number of chat channels and you want to have the same command permissions across multiple channels, you can apply the configured AWS Chatbot role to any of your other chat channels without further modification. The IAM policies will be consistent across chat channels that support commands in your AWS Chatbot service.