AWS datasync medium security documentation change
Summary
Added entries for DataSync Discovery deprecation and AWS managed policy update
Security assessment
The policy update removes tagging conditions for Secrets Manager permissions, which could impact access control. This is a documented security-related change to IAM policies.
Diff
diff --git a/datasync/latest/userguide/doc-history.md b/datasync/latest/userguide/doc-history.md index b0a226409..bfeef19d6 100644 --- a//datasync/latest/userguide/doc-history.md +++ b//datasync/latest/userguide/doc-history.md @@ -12,0 +13,2 @@ Change| Description| Date +Discovery no longer available| As of May 20, 2025, Discovery is no longer an available DataSync feature.| May 20, 2025 +[AWS managed policy update - Update to existing policy](https://docs.aws.amazon.com/datasync/latest/userguide/security-iam-awsmanpol.html)| The `AWSDataSyncFullAccess` policy has updated permission statements that remove tagging conditions from the permissions DataSync uses to create Secrets Manager secrets.| May 13, 2025