AWS AmazonCloudWatch medium security documentation change
Summary
Added entries about IAM policy updates (AIOpsConsoleAdminPolicy, AIOpsAssistantPolicy, AIOpsOperatorAccess) enabling cross-account investigation group validation and additional permissions
Security assessment
Changes to IAM policies directly relate to access control security configurations. The explicit mention of cross-account permissions and expanded privileges indicates security-related access management updates.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/DocumentHistory.md b/AmazonCloudWatch/latest/monitoring/DocumentHistory.md index 38b9d6158..4a7e12917 100644 --- a//AmazonCloudWatch/latest/monitoring/DocumentHistory.md +++ b//AmazonCloudWatch/latest/monitoring/DocumentHistory.md @@ -10,0 +11,3 @@ Change| Description| Date +Updated AIOpsConsoleAdminPolicy policy| CloudWatch updated the AIOpsConsoleAdminPolicy policy to permit validation of investigation groups across accounts. For more information, see [AIOpsConsoleAdminPolicy policy](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/auth-and-access-control-cw.html#managed-policies-QInvestigations-AIOpsConsoleAdminPolicy).| June 13, 2025 +Updated AIOpsAssistantPolicy policy| CloudWatch updated the AIOpsAssistantPolicy policy to provide additional IAM permissions. For more information, see [AIOpsConsoleAdminPolicy policy](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/auth-and-access-control-cw.html#managed-policies-QInvestigations-AIOpsAssistantPolicy).| June 13, 2025 +Update managed policy| CloudWatch updated the **AIOpsOperatorAccess** policy to permit validation of investigation groups across accounts. For more information, see [AIOpsOperatorAccess](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/managed-policies-QInvestigations-AIOpsOperatorAccess.html).| June 13, 2025 @@ -15,0 +19 @@ CloudWatch Network Monitoring releases multiple account support for Network Flow +[Updated AIOpsAssistantPolicy policy](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/auth-and-access-control-cw.html#managed-policies-QInvestigations-AIOpsAssistant)| CloudWatch added permissions to the **AIOpsAssistantPolicy** policy, which Amazon Q Developer operational investigations uses to find information during investigations.| April 11, 2025