AWS timestream documentation change

Service: timestream · 2025-10-19 · Documentation medium

File: timestream/latest/developerguide/security-iam-awsmanpol.md

Summary

Added documentation for AmazonTimestreamInfluxDBFullAccess policy and updated policy change history

Security assessment

Introduces a new AWS-managed IAM policy and describes its permissions. This is security documentation but does not indicate remediation of a security issue. The policy includes marketplace product ID restrictions, which enforce least privilege.

Diff

diff --git a/timestream/latest/developerguide/security-iam-awsmanpol.md b/timestream/latest/developerguide/security-iam-awsmanpol.md
index 922a3b6d8..92dadee10 100644
--- a//timestream/latest/developerguide/security-iam-awsmanpol.md
+++ b//timestream/latest/developerguide/security-iam-awsmanpol.md
@@ -5 +5 @@
-AmazonTimestreamReadOnlyAccessAmazonTimestreamConsoleFullAccessAmazonTimestreamFullAccessPolicy updates
+AmazonTimestreamInfluxDBFullAccessAmazonTimestreamReadOnlyAccessAmazonTimestreamConsoleFullAccessAmazonTimestreamFullAccessPolicy updates
@@ -20,0 +21,2 @@ For more information, see [AWS managed policies](https://docs.aws.amazon.com/IAM
+  * AmazonTimestreamInfluxDBFullAccess
+
@@ -31,0 +34,15 @@ For more information, see [AWS managed policies](https://docs.aws.amazon.com/IAM
+## AWS managed policy: AmazonTimestreamInfluxDBFullAccess
+
+You can attach `AmazonTimestreamInfluxDBFullAccess` to your users, groups, and roles. The policy access to create, update, delete and list Amazon Timestream InfluxDB instances.
+
+###### Permission details
+
+This policy includes the following permission:
+
+  * `Amazon Timestream` – Provides full administrative access to create, update, delete and list Amazon Timestream InfluxDB instances and create and list parameter groups. 
+
+
+
+
+To review this policy in JSON format, see [AmazonTimestreamInfluxDBFullAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonTimestreamInfluxDBFullAccess.html).
+
@@ -104,0 +122 @@ Change | Description | Date
+AmazonTimestreamConsoleFullAccess – Update to an existing policy |  Timestream for InfluxDB has added Influx Enterprise marketplace product ID to the existing `AmazonTimestreamInfluxDBFullAccess` managed policy to support subscription to enterprise marketplace offerings. These permissions are restricted to specific AWS Marketplace products through a condition that limits the access to only certain `ProductIds`. See [AmazonTimestreamInfluxDBFullAccess](https://docs.aws.amazon.com/timestream/latest/developerguide/security-iam-awsmanpol-influxdb.html#iam.identitybasedpolicies.predefinedpolicies). | October 17, 2025