AWS AmazonCloudWatch documentation change
Summary
Updated AmazonCloudWatchRUMReadOnlyAccess policy with new monitoring-related permissions
Security assessment
Documents expanded IAM policy permissions for monitoring capabilities, which relates to security access controls but doesn't indicate a security fix or vulnerability
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/DocumentHistory.md b/AmazonCloudWatch/latest/monitoring/DocumentHistory.md index 3e13db37f..38b9d6158 100644 --- a//AmazonCloudWatch/latest/monitoring/DocumentHistory.md +++ b//AmazonCloudWatch/latest/monitoring/DocumentHistory.md @@ -10,0 +11 @@ Change| Description| Date +[AmazonCloudWatchRUMReadOnlyAccess updated](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/auth-and-access-control-cw.html#managed-policies-cloudwatch-RUM)| The `synthetics: describeCanaries`, `synthetics:describeCanariesLastRun`, `cloudwatch:GetMetricData`, `cloudwatch:DescribeAlarms`, `logs:DescribeLogGroups`, `xray:GetTraceSummaries`, and `rum:ListTagsForResources` permissions was added to the CloudWatch RUM `AmazonCloudWatchRUMReadOnlyAccess` policy.| June 12, 2025