AWS Security ChangesHomeSearch

AWS amazonq documentation change

Service: amazonq · 2025-03-10 · Documentation low

File: amazonq/latest/qdeveloper-ug/id-based-policy-examples-admins.md

Summary

Added 'sso:UpdateApplication' permission to IAM policy example for Amazon Q administrators.

Security assessment

While updating IAM policies is security-related, this change appears to be a routine policy expansion rather than addressing a specific security issue.

Diff

diff --git a/amazonq/latest/qdeveloper-ug/id-based-policy-examples-admins.md
index 7cf0ce1e9..8feb85057 100644
--- a/amazonq/latest/qdeveloper-ug/id-based-policy-examples-admins.md
+++ b/amazonq/latest/qdeveloper-ug/id-based-policy-examples-admins.md
@@ -56 +56,2 @@ The `codewhisperer` prefix is a legacy name from a service that merged with Amaz
-                "sso:DeleteApplicationAssignment"
+                "sso:DeleteApplicationAssignment",
+                "sso:UpdateApplication"