AWS AmazonCloudWatch low security documentation change
Summary
Added documentation about AmazonCloudWatchRUMReadOnlyAccess policy update adding rum:GetResourcePolicy permission
Security assessment
The change explicitly adds a new IAM permission (rum:GetResourcePolicy) to view resource policies, which is an access control modification. Resource policies govern security permissions, making this a security-related documentation update to reflect improved policy visibility capabilities.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/DocumentHistory.md b/AmazonCloudWatch/latest/monitoring/DocumentHistory.md index 55b537425..873409a85 100644 --- a//AmazonCloudWatch/latest/monitoring/DocumentHistory.md +++ b//AmazonCloudWatch/latest/monitoring/DocumentHistory.md @@ -10,0 +11 @@ Change| Description| Date +[AmazonCloudWatchRUMReadOnlyAccess updated](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/auth-and-access-control-cw.html#managed-policies-cloudwatch-RUM)| The `rum:GetResourcePolicy` permission was added so that CloudWatch RUM can view the resource policy attached to the RUM application monitor.| April 28, 2025