AWS AWSEC2 documentation change

Service: AWSEC2 · 2025-08-28 · Documentation low

File: AWSEC2/latest/UserGuide/security-iam-awsmanpol.md

Summary

Added new AWS managed policy AmazonEC2ImageReferencesAccessPolicy with permissions for DescribeImageReferences API and resource scanning

Security assessment

Introduces documentation for a new IAM policy that controls access to EC2 image references. While this relates to security permissions, there is no evidence it addresses a specific vulnerability or incident.

Diff

diff --git a/AWSEC2/latest/UserGuide/security-iam-awsmanpol.md b/AWSEC2/latest/UserGuide/security-iam-awsmanpol.md
index 74f34b909..7aed4dc45 100644
--- a//AWSEC2/latest/UserGuide/security-iam-awsmanpol.md
+++ b//AWSEC2/latest/UserGuide/security-iam-awsmanpol.md
@@ -5 +5 @@
-AmazonEC2FullAccessAmazonEC2ReadOnlyAccessAWSEC2CapacityReservationFleetRolePolicyAWSEC2FleetServiceRolePolicyAWSEC2SpotFleetServiceRolePolicyAWSEC2SpotServiceRolePolicyAWSEC2VssSnapshotPolicyDeclarativePoliciesEC2ReportEC2FastLaunchFullAccessEC2FastLaunchServiceRolePolicyEc2InstanceConnectEndpointPolicy updates
+AmazonEC2FullAccessAmazonEC2ReadOnlyAccessAmazonEC2ImageReferencesAccessPolicyAWSEC2CapacityReservationFleetRolePolicyAWSEC2FleetServiceRolePolicyAWSEC2SpotFleetServiceRolePolicyAWSEC2SpotServiceRolePolicyAWSEC2VssSnapshotPolicyDeclarativePoliciesEC2ReportEC2FastLaunchFullAccessEC2FastLaunchServiceRolePolicyEc2InstanceConnectEndpointPolicy updates
@@ -26,0 +27,6 @@ To view the permissions for this policy, see [AmazonEC2ReadOnlyAccess](https://d
+## AWS managed policy: AmazonEC2ImageReferencesAccessPolicy
+
+You can attach the `AmazonEC2ImageReferencesAccessPolicy` policy to your IAM identities. This policy grants the permissions needed to use the EC2 DescribeImageReferences API, including permission to view EC2 instances, launch templates, Systems Manager parameters, and Image Builder recipes. The policy supports the `IncludeAllResourceTypes` flag and will continue to work when AWS adds support for new resource types, removing the need for future policy updates.
+
+To view the permissions for this policy, see [AmazonEC2ImageReferencesAccessPolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonEC2ImageReferencesAccessPolicy.html) in the _AWS Managed Policy Reference_.
+
@@ -99,0 +106 @@ Change | Description | Date
+AmazonEC2ImageReferencesAccessPolicy – New policy | Amazon EC2 added this policy to provide permission to scan all resources types supported by the EC2 DescribeImageReferences API. | August 26, 2025