AWS datazone medium security documentation change
Summary
Added entry about AmazonDataZoneFullAccess policy updates for SecretsManager permissions
Security assessment
Documents updates to AWS managed policies to generalize SecretsManager permissions for domain creation, preventing potential misconfigurations. Directly addresses security-related IAM policy scoping.
Diff
diff --git a/datazone/latest/userguide/doc-history.md b/datazone/latest/userguide/doc-history.md index 916562250..b278fcb3f 100644 --- a//datazone/latest/userguide/doc-history.md +++ b//datazone/latest/userguide/doc-history.md @@ -10,0 +11 @@ Change| Description| Date +AmazonDataZoneFullAccess - policy updates| Policy updates to the **AmazonDataZoneFullAccess** \- generalizing the scope for SecretsManager `create` and `tag` permissions for new domains that will have the format of `dzd-` instead of `dzd_..` For more information, see [Amazon DataZone updates to AWS managed policies](https://docs.aws.amazon.com/datazone/latest/userguide/security-iam-awsmanpol.html#security-iam-awsmanpol-updates).| July 23, 2025