AWS config documentation change
Summary
Added entry about IAM policy updates granting additional permissions for multiple AWS services and removed references to several managed rules
Security assessment
The change documents expanded IAM permissions for security-related services (e.g., Security Hub, Macie), but there's no evidence of addressing a specific vulnerability. The removed rules appear to be routine documentation maintenance.
Diff
diff --git a/config/latest/developerguide/DocumentHistory.md b/config/latest/developerguide/DocumentHistory.md index 497664543..b4d42a3c6 100644 --- a//config/latest/developerguide/DocumentHistory.md +++ b//config/latest/developerguide/DocumentHistory.md @@ -19,0 +20 @@ Change| Description| Date +Security IAM update| The `AWSConfigServiceRolePolicy` policy and `AWS_ConfigRole` policy now grant additional permissions for AWS B2B Data Interchange, Amazon Bedrock, AWS Clean Rooms, AWS CodeConnections, AWS Direct Connect, AWS Database Migration Service (AWS DMS), Amazon CloudWatch Logs, Amazon Macie, Amazon Managed Blockchain, Amazon Q Business, Route 53 Profiles, Amazon Simple Storage Service (Amazon S3), Amazon SageMaker AI, AWS Security Hub, and AWS Systems Manager Incident Manager, AWS Systems Manager Incident Manager Contacts, and AWS Systems Manager. For more information, see [AWS managed policies for AWS Config](https://docs.aws.amazon.com/config/latest/developerguide/security-iam-awsmanpol.html). | April 8, 2025 @@ -197 +197,0 @@ AWS Config updates managed rules| With this release, AWS Config supports the fol - * [beanstalk-logs-to-cloudwatch](https://docs.aws.amazon.com/config/latest/developerguide/beanstalk-logs-to-cloudwatch.html) @@ -206 +205,0 @@ AWS Config updates managed rules| With this release, AWS Config supports the fol - * [elasticsearch-update-check](https://docs.aws.amazon.com/config/latest/developerguide/elasticsearch-update-check.html) @@ -211 +209,0 @@ AWS Config updates managed rules| With this release, AWS Config supports the fol - * [ecr-repository-lifecycle-policy-configured](https://docs.aws.amazon.com/config/latest/developerguide/ecr-repository-lifecycle-policy-configured.html) @@ -749 +746,0 @@ AWS Config updates managed rules| With this release, AWS Config supports the fol - * [nlb-cross-zone-load-balancing-enabled](https://docs.aws.amazon.com/config/latest/developerguide/nlb-cross-zone-load-balancing-enabled.html)