AWS Security ChangesHomeSearch

AWS fsx medium security documentation change

Service: fsx · 2025-07-16 · Security-related medium

File: fsx/latest/FileCacheGuide/doc-history.md

Summary

Removed 'fsx:UpdateS3AccessPointAttachments' from managed policies in documentation

Security assessment

Reduces excessive permissions in AWS managed policies, addressing potential over-privilege risks. Reflects a security hardening measure.

Diff

diff --git a/fsx/latest/FileCacheGuide/doc-history.md b/fsx/latest/FileCacheGuide/doc-history.md
index b55277885..de53ed48b 100644
--- a//fsx/latest/FileCacheGuide/doc-history.md
+++ b//fsx/latest/FileCacheGuide/doc-history.md
@@ -9 +9 @@
-  * **Latest documentation update:** May 28, 2025
+  * **Latest documentation update:** June 25, 2025
@@ -18,2 +18,2 @@ Change| Description| Date
-Amazon FSx updated the AmazonFSxFullAccess AWS managed policy| The [AmazonFSxFullAccess](https://docs.aws.amazon.com/fsx/latest/FileCacheGuide/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonFSxFullAccess) managed policy was updated to add the `fsx:CreateAndAttachS3AccessPoint`, `fsx:DescribeS3AccessPointAttachments`, `fsx:UpdateS3AccessPointAttachments`, and `fsx:DetachAndDeleteS3AccessPoint` permissions.| May 28, 2025  
-Amazon FSx updated the AmazonFSxConsoleFullAccess AWS managed policy| The [AmazonFSxConsoleFullAccess](https://docs.aws.amazon.com/fsx/latest/FileCacheGuide/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonFSxConsoleFullAccess) managed policy was updated to add the `fsx:CreateAndAttachS3AccessPoint`, `fsx:DescribeS3AccessPointAttachments`, `fsx:UpdateS3AccessPointAttachments,` and `fsx:DetachAndDeleteS3AccessPoint` permissions. | May 28, 2025  
+Amazon FSx updated the AmazonFSxFullAccess AWS managed policy| The [AmazonFSxFullAccess](https://docs.aws.amazon.com/fsx/latest/FileCacheGuide/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonFSxFullAccess) managed policy was updated to add the `fsx:CreateAndAttachS3AccessPoint`, `fsx:DescribeS3AccessPointAttachments`, and `fsx:DetachAndDeleteS3AccessPoint` permissions.| June 25, 2025  
+Amazon FSx updated the AmazonFSxConsoleFullAccess AWS managed policy| The [AmazonFSxConsoleFullAccess](https://docs.aws.amazon.com/fsx/latest/FileCacheGuide/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonFSxConsoleFullAccess) managed policy was updated to add the `fsx:CreateAndAttachS3AccessPoint`, `fsx:DescribeS3AccessPointAttachments`, and `fsx:DetachAndDeleteS3AccessPoint` permissions. | June 25, 2025