AWS elasticbeanstalk documentation change

Service: elasticbeanstalk · 2025-03-10 · Documentation low

File: elasticbeanstalk/latest/dg/security-iam-awsmanpol.md

Summary

Updated IAM policy documentation for Elastic Beanstalk managed updates and tag propagation support

Security assessment

The changes document IAM policy updates related to tag propagation and CloudFormation operations, which are security-related features but do not address a specific security vulnerability

Diff

diff --git a/elasticbeanstalk/latest/dg/security-iam-awsmanpol.md
index a16a36ef6..0ca1df307 100644
--- a/elasticbeanstalk/latest/dg/security-iam-awsmanpol.md
+++ b/elasticbeanstalk/latest/dg/security-iam-awsmanpol.md
@@ -24,0 +25 @@ Change | Description | Date
+**AWSElasticBeanstalkManagedUpdatesCustomerRolePolicy** –Updated existing policy |  This policy was updated to allow Elastic Beanstalk to perform managed updates when [Tag propagation to launch templates](./applications-tagging-resources.launch-templates.html) is enabled. For more information, see [Managed service role policies](./iam-servicerole.html#iam-servicerole-policy). | February 27, 2025  
@@ -34 +35 @@ The following polices were updated:
-|  These policies were updated to allow Elastic Beanstalk to add or remove tags when it creates or updates an AWS CloudFormation stack or change set. For more information about **AWSElasticBeanstalkManagedUpdatesServiceRolePolicy** , see [Service-linked role permissions for Elastic Beanstalk](./using-service-linked-roles-managedupdates.html#service-linked-role-permissions-managedupdates). For more information about **AWSElasticBeanstalkRoleCore** , see [Policies for integration with other services](./AWSHowTo.iam.managed-policies.html#iam-userpolicies-managed-other-services). |  April 30, 2024   
+|  These policies were updated to allow Elastic Beanstalk to add or remove tags when it creates or updates an AWS CloudFormation stack or change set. For more information about `AWSElasticBeanstalkManagedUpdatesServiceRolePolicy`, see [Service-linked role permissions for Elastic Beanstalk](./using-service-linked-roles-managedupdates.html#service-linked-role-permissions-managedupdates). For more information about `AWSElasticBeanstalkRoleCore`, see [Policies for integration with other services](./AWSHowTo.iam.managed-policies.html#iam-userpolicies-managed-other-services). |  April 30, 2024