AWS AWSEC2 documentation change

Service: AWSEC2 · 2025-10-16 · Documentation medium

File: AWSEC2/latest/UserGuide/security-iam-awsmanpol.md

Summary

Added documentation for AWSEC2CapacityManagerServiceRolePolicy managed policy and updated policy list

Security assessment

The change documents a new IAM managed policy which is security-related infrastructure, but there's no evidence it addresses an existing vulnerability. It adds security documentation about permission management.

Diff

diff --git a/AWSEC2/latest/UserGuide/security-iam-awsmanpol.md b/AWSEC2/latest/UserGuide/security-iam-awsmanpol.md
index 8fb5a6aa1..206539529 100644
--- a//AWSEC2/latest/UserGuide/security-iam-awsmanpol.md
+++ b//AWSEC2/latest/UserGuide/security-iam-awsmanpol.md
@@ -5 +5 @@
-AmazonEC2FullAccessAmazonEC2ReadOnlyAccessAmazonEC2ImageReferencesAccessPolicyAWSEC2CapacityReservationFleetRolePolicyAWSEC2FleetServiceRolePolicyAWSEC2SpotFleetServiceRolePolicyAWSEC2SpotServiceRolePolicyAWSEC2VssSnapshotPolicyDeclarativePoliciesEC2ReportEC2FastLaunchFullAccessEC2FastLaunchServiceRolePolicyEc2InstanceConnectEc2InstanceConnectEndpointPolicy updates
+AmazonEC2FullAccessAmazonEC2ReadOnlyAccessAmazonEC2ImageReferencesAccessPolicyAWSEC2CapacityReservationFleetRolePolicyAWSEC2FleetServiceRolePolicyAWSEC2SpotFleetServiceRolePolicyAWSEC2SpotServiceRolePolicyAWSEC2VssSnapshotPolicyDeclarativePoliciesEC2ReportEC2FastLaunchFullAccessAWSEC2CapacityManagerServiceRolePolicyEC2FastLaunchServiceRolePolicyEc2InstanceConnectEc2InstanceConnectEndpointPolicy updates
@@ -87,0 +88,6 @@ To view the permissions for this policy, see [EC2FastLaunchFullAccess](https://d
+## AWS managed policy: AWSEC2CapacityManagerServiceRolePolicy
+
+This policy is attached to the service-linked role named **AWSServiceRoleForEC2CapacityManager** to allow EC2 Capacity Manager to manage capacity resources and integrate with AWS Organizations on your behalf. For more information, see [Service-linked roles for EC2 Capacity Manager](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-service-linked-roles-cm.html).
+
+To view the permissions for this policy, see [AWSEC2CapacityManagerServiceRolePolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSEC2CapacityManagerServiceRolePolicy.html) in the _AWS Managed Policy Reference_.
+
@@ -111,0 +118 @@ Change | Description | Date
+AWSEC2CapacityManagerServiceRolePolicy – New policy | Amazon EC2 added this policy to allow you to manage capacity resources and integrate with AWS Organizations on your behalf. | October 15, 2025