AWS elasticloadbalancing documentation change
Summary
Updated managed policies to add new actions (ec2:AllocateIpamPoolCidr, arc-zonal-shift actions, ec2:DescribeVpcPeeringConnections) and adjust policy version tracking dates
Security assessment
Changes document IAM policy updates granting new permissions but do not address specific security vulnerabilities. The updates relate to standard feature enablement (zonal shifts, IPAM pool CIDR allocation) rather than patching security flaws.
Diff
diff --git a/elasticloadbalancing/latest/userguide/managed-policies.md b/elasticloadbalancing/latest/userguide/managed-policies.md index 21d3e9e9b..c6e7de999 100644 --- a//elasticloadbalancing/latest/userguide/managed-policies.md +++ b//elasticloadbalancing/latest/userguide/managed-policies.md @@ -47,7 +47,8 @@ Change | Description | Date -AWS managed policy: ElasticLoadBalancingFullAccess \- Update to an existing policy. | Elastic Load Balancing added a new action to grant permissions to use zonal shift. This action was added to the Elastic Load Balancing full access policy. It is associated with the `arc-zonal-shift:*` API operations. | November 28, 2022 -AWS managed policy: ElasticLoadBalancingReadOnly \- Update to an existing policy. | Elastic Load Balancing added a new action to grant permissions to use zonal shift. This action was added to the Elastic Load Balancing read only policy. It is associated with the `arc-zonal-shift:GetManagedResource`, `arc-zonal-shift:ListManagedResources` and `arc-zonal-shift:ListZonalShifts` API operations. | November 28, 2022 -AWS managed policy: AWSElasticLoadBalancingServiceRolePolicy \- Update to an existing policy. | Elastic Load Balancing added a new action to grant permissions to use peering connections. This action was added to the service-linked role policy, for Elastic Load Balancing control plane. It is associated with the `ec2:DescribeVpcPeeringConnections` API operation. | October 11, 2021 -AWS managed policy: ElasticLoadBalancingFullAccess \- Update to an existing policy. | Elastic Load Balancing added a new action to grant permissions to use peering connections. This action was added to the Elastic Load Balancing full access policy. It is associated with the `ec2:DescribeVpcPeeringConnections` API operation. | October 11, 2021 -AWS managed policy: AWSElasticLoadBalancingClassicServiceRolePolicy \- Update to an existing policy. | Elastic Load Balancing added a service-linked role policy (for the control plane) for the Classic Load Balancer. This update is for version 2 (default). | October 7, 2019 -AWS managed policy: ElasticLoadBalancingReadOnly | Provides read-only access to Elastic Load Balancing and dependent services. This is the version 1 (default). | September 20, 2018 -Elastic Load Balancing started tracking changes | Elastic Load Balancing started tracking changes for its AWS managed policies. | July 23, 2021 +AWSElasticLoadBalancingServiceRolePolicy \- Update to an existing policy | Added the `ec2:AllocateIpamPoolCidr` action to grant permissions to allocate CIDR blocks from IPAM pools. | February 17, 2025 +ElasticLoadBalancingFullAccess \- Update to an existing policy | Added the `arc-zonal-shift:*` actions to grant permissions required for zonal shift. | November 28, 2023 +ElasticLoadBalancingReadOnly \- Update to an existing policy | Added the following actions to grant permissions required for zonal shift: `arc-zonal-shift:GetManagedResource`, `arc-zonal-shift:ListManagedResources` and `arc-zonal-shift:ListZonalShifts`. | November 28, 2023 +AWSElasticLoadBalancingServiceRolePolicy \- Update to an existing policy | Added the `ec2:DescribeVpcPeeringConnections` action to grant permissions required for peering connections. | October 11, 2021 +ElasticLoadBalancingFullAccess \- Update to an existing policy | Added the `ec2:DescribeVpcPeeringConnections` action to grant permissions required for peering connections. | October 11, 2021 +ElasticLoadBalancingFullAccess \- New policy | Provides full access to Elastic Load Balancing and dependent services. | September 20, 2018 +ElasticLoadBalancingReadOnly \- New policy | Provides read-only access to Elastic Load Balancing and dependent services. | September 20, 2018 +Elastic Load Balancing started tracking changes | Elastic Load Balancing started tracking changes for its AWS managed policies. | September 20, 2018