AWS AmazonCloudFront documentation change
Summary
Added ACM certificate-related permissions (DescribeCertificate and RequestCertificate) to CloudFrontReadOnlyAccess and CloudFrontFullAccess IAM policies
Security assessment
The change documents new IAM policy permissions related to ACM certificate management, which helps users understand required permissions for CloudFront operations. While IAM policies are security-related, there is no evidence this addresses a specific vulnerability or security incident - it appears to be a routine update to reflect service dependencies.
Diff
diff --git a/AmazonCloudFront/latest/DeveloperGuide/security-iam-awsmanpol.md b/AmazonCloudFront/latest/DeveloperGuide/security-iam-awsmanpol.md index 2e195e4b9..50fa53e38 100644 --- a//AmazonCloudFront/latest/DeveloperGuide/security-iam-awsmanpol.md +++ b//AmazonCloudFront/latest/DeveloperGuide/security-iam-awsmanpol.md @@ -51,0 +52,2 @@ This policy includes the following permissions. + * `acm:DescribeCertificate` – Allows principals to get details about an ACM certificate. + @@ -80,0 +83,2 @@ This policy includes the following permissions. + * `acm:DescribeCertificate` – Allows principals to get details about an ACM certificate. + @@ -82,0 +87,2 @@ This policy includes the following permissions. + * `acm:RequestCertificate` – Allows principals to request managed certificates from ACM. + @@ -147,0 +154,2 @@ Change | Description | Date +CloudFrontReadOnlyAccess – Update to existing policy | CloudFront added new permission for ACM. The new permission allows principals to get details about an ACM certificate. | April 28, 2025 +CloudFrontFullAccess – Update to existing policy | CloudFront added new permissions for ACM. The new permissions allow principals to get details about an ACM certificate and to request a managed certificate from ACM. | April 28, 2025