AWS AmazonCloudWatch documentation change
Summary
Updated IAM policies (ReadOnlyAccess and FullAccess) with new monitoring capabilities
Security assessment
The changes document updates to managed IAM policies, which are security artifacts. While not fixing a security issue, they add documentation about access control for monitoring features.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/DocumentHistory.md b/AmazonCloudWatch/latest/monitoring/DocumentHistory.md index f35417365..cbd8f6c89 100644 --- a//AmazonCloudWatch/latest/monitoring/DocumentHistory.md +++ b//AmazonCloudWatch/latest/monitoring/DocumentHistory.md @@ -10,0 +11,3 @@ Change| Description| Date +Updated CloudWatchApplicationSignalsReadOnlyAccess policy| CloudWatch updated the `CloudWatchApplicationSignalsReadOnlyAccess` policy to view how resources and services change in your account and view top observations for service anomalies in your account. For more information, see [CloudWatchApplicationSignalsReadOnlyAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/CloudWatchApplicationSignalsReadOnlyAccess.html).| September 29, 2025 +Updated CloudWatchApplicationSignalsFullAccess policy| CloudWatch updated the `CloudWatchApplicationSignalsFullAccess` policy to view how resources and services change in your account and view top observations for service anomalies in your account. For more information, see [CloudWatchApplicationSignalsFullAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/CloudWatchApplicationSignalsFullAccess.html).| September 29, 2025 +CloudWatch Application Signals added support for dynamic service grouping and filtering, last deployment tracking, and automated audit findings| You can group and filter services with Application Signals' dynamic grouping capabilities track deployment activities through Application Signals' automatic processing of CloudTrail events, and discover critical insights through Application Signals' automated audit findings. For more information, see [Application Signals](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Monitoring-Sections.html). | September 29, 2025 @@ -69 +72 @@ CloudWatch Application Signals is generally available| CloudWatch Application Si -[CloudWatch Application Signals service map supports canary, RUM clients and AWS service dependency groupings.](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/ServiceMap.html)| The Application Signals preview release has added default groupings in the service map for canaries, RUM clients, and AWS service dependencies of the same type. This change reduces the number of icons in the service map default view to make it easier to view and navigate.| May 21, 2024 +[CloudWatch Application Signals application map supports canary, RUM clients and AWS service dependency groupings.](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/ServiceMap.html)| The Application Signals preview release has added default groupings in the application map for canaries, RUM clients, and AWS service dependencies of the same type. This change reduces the number of icons in the application map default view to make it easier to view and navigate.| May 21, 2024