AWS datazone documentation change
Summary
Added documentation for AmazonDataZoneGlueManageAccessRolePolicy updates enabling IAM PassRole
Security assessment
Documents expanded IAM permissions for federated table management but does not indicate remediation of a security issue
Diff
diff --git a/datazone/latest/userguide/doc-history.md b/datazone/latest/userguide/doc-history.md index 75550b633..0e221f04b 100644 --- a//datazone/latest/userguide/doc-history.md +++ b//datazone/latest/userguide/doc-history.md @@ -10,0 +11 @@ Change| Description| Date +AmazonDataZoneGlueManageAccessRolePolicy - policy updates| Policy updates to the **AmazonDataZoneGlueManageAccessRolePolicy** \- the Amazon DataZone project user role is used as the data transfer role for federated tables. This update adds `datazone_usr_role*` to the `iam:PassRole` statement, enabling the project user role to be used for this purpose. For more information, see [Amazon DataZone updates to AWS managed policies](https://docs.aws.amazon.com/datazone/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates).| May 21, 2025