AWS IAM documentation change
Summary
Added entry for AccessAnalyzerServiceRolePolicy permission update adding iam:GetAccountAuthorizationDetails
Security assessment
Documents an expansion of IAM Access Analyzer's permissions to include account authorization details retrieval, which enhances security visibility but does not address a specific vulnerability.
Diff
diff --git a/IAM/latest/UserGuide/document-history.md b/IAM/latest/UserGuide/document-history.md index 3a374ce60..321e38b10 100644 --- a//IAM/latest/UserGuide/document-history.md +++ b//IAM/latest/UserGuide/document-history.md @@ -10,0 +11 @@ Change| Description| Date +[`AccessAnalyzerServiceRolePolicy` – Added permissions](https://docs.aws.amazon.com/IAM/latest/UserGuide/security-iam-awsmanpol.html)| IAM Access Analyzer added `iam:GetAccountAuthorizationDetails` to the service-level permissions of [AccessAnalyzerServiceRolePolicy](https://console.aws.amazon.com/iam/home#policies/AccessAnalyzerServiceRolePolicy).| May 12, 2025