AWS awssupport documentation change
Summary
Updated AWSSupportServiceRolePolicy with 25 new permissions across multiple services and corrected service references
Security assessment
Documents expanded IAM permissions for troubleshooting, which is security-relevant but does not address a specific vulnerability.
Diff
diff --git a/awssupport/latest/user/aws-managed-policies-aws-support.md b/awssupport/latest/user/aws-managed-policies-aws-support.md index 1883dfbf1..76356bef2 100644 --- a//awssupport/latest/user/aws-managed-policies-aws-support.md +++ b//awssupport/latest/user/aws-managed-policies-aws-support.md @@ -45,0 +46,12 @@ AWS Support Change | Description | Date +AWSSupportServiceRolePolicy – Update to an existing policy | Added 25 new permissions to the following services to perform actions that help troubleshoot customer issues related to billing, administrative, and technical support: + + * AWS CloudFormation – To debug issues related to AWS CloudFormation. + * AWS Config – To troubleshoot issues related to AWS Config. + * Amazon OpenSearch Service – To debug issues related to Amazon OpenSearch Service. + * AWS Glue – To debug issues related to AWS Glue. + * AWS IAM – To troubleshoot issues related to AWS IAM. + * Amazon Pinpoint – To troubleshoot issues related to Amazon Pinpoint. + * AWS Outposts – To debug issues related to AWS Outposts. + * AWS STS – To debug issues related to AWS STS. + +For more information, see [Permission changes for AWSSupportServiceRolePolicy](./aws-support-service-link-role-updates.html). | Jul 15, 2025 @@ -53,2 +65,2 @@ AWSSupportServiceRolePolicy – Update to an existing policy | Added 257 new pe - * AWS CodePipeline – To troubleshoot issues related to AWS Config. - * AWS Config – To troubleshoot issues related to Amazon Connect. + * AWS CodePipeline – To troubleshoot issues related to AWS CodePipeline. + * AWS Config – To troubleshoot issues related to AWS Config.