AWS awssupport documentation change

Service: awssupport · 2025-10-01 · Documentation medium

File: awssupport/latest/user/aws-managed-policies-aws-support.md

Summary

Added 125 new permissions to AWSSupportServiceRolePolicy across multiple services for troubleshooting purposes

Security assessment

Expands documentation about security policies by adding new permissions required for support operations. While permission changes have security implications, there's no evidence this addresses a specific vulnerability.

Diff

diff --git a/awssupport/latest/user/aws-managed-policies-aws-support.md b/awssupport/latest/user/aws-managed-policies-aws-support.md
index 3fd781801..d002c6d62 100644
--- a//awssupport/latest/user/aws-managed-policies-aws-support.md
+++ b//awssupport/latest/user/aws-managed-policies-aws-support.md
@@ -45,0 +46,23 @@ AWS Support Change | Description | Date
+AWSSupportServiceRolePolicy – Update to an existing policy |  Added 125 new permissions to the following services to perform actions that help troubleshoot customer issues related to billing, administrative, and technical support:
+
+  * Artificial intelligence for IT operations(AIOps) – To debug issues related to Artificial intelligence for IT operations(AIOps).
+  * AWS Backup gateway – To troubleshoot issues related to AWS Backup gateway.
+  * AWS CloudFormation – To debug issues related to AWS CloudFormation.
+  * Amazon Cognito Identity – To debug issues related to Amazon Cognito Identity.
+  * Amazon Cognito – To troubleshoot issues related to Amazon Cognito.
+  * AWS Backup – To debug issues related to AWS Backup.
+  * AWS Directory Service – To debug issues related to AWS Directory Service.
+  * Amazon EC2 – To debug issues related to Amazon EC2.
+  * AWS FIS – To troubleshoot issues related to AWS FIS.
+  * Amazon FSx – To troubleshoot issues related to Amazon FSx.
+  * AWS Global Accelerator – To debug issues related to AWS Global Accelerator.
+  * AWS Identity Store – To debug issues related to AWS Identity Store.
+  * AWS Invoicing – To debug issues related to AWS Invoicing.
+  * AWS Lake Formation – To troubleshoot issues related to AWS Lake Formation.
+  * AWS Network Firewall – To debug issues related to AWS Network Firewall.
+  * Oracle Database@AWS – To troubleshoot issues related to Oracle Database@AWS.
+  * Amazon S3 – To debug issues related to Amazon S3.
+  * Amazon SES – To troubleshoot issues related to Amazon SES.
+  * AWS IAM Identity Center – To troubleshoot issues related to AWS IAM Identity Center.
+
+| Sep 30, 2025