AWS Security ChangesHomeSearch

AWS AmazonCloudWatch documentation change

Service: AmazonCloudWatch · 2025-10-28 · Documentation low

File: AmazonCloudWatch/latest/monitoring/managed-policies-cloudwatch.md

Summary

Removed references to CloudWatch Evidently managed policies and related documentation sections

Security assessment

The changes remove documentation about CloudWatch Evidently IAM policies but do not indicate any security vulnerability or incident. This appears to be a documentation cleanup or deprecation of Evidently-related policies rather than addressing a security issue. No security implications are mentioned in the diff.

Diff

diff --git a/AmazonCloudWatch/latest/monitoring/managed-policies-cloudwatch.md b/AmazonCloudWatch/latest/monitoring/managed-policies-cloudwatch.md
index 4b92bfdf4..51749ad93 100644
--- a//AmazonCloudWatch/latest/monitoring/managed-policies-cloudwatch.md
+++ b//AmazonCloudWatch/latest/monitoring/managed-policies-cloudwatch.md
@@ -5 +5 @@
-Policy updatesCloudWatchFullAccessV2CloudWatchFullAccessCloudWatchReadOnlyAccessCloudWatchActionsEC2AccessCloudWatch-CrossAccountAccessCloudWatchAutomaticDashboardsAccessCloudWatchAgentServerPolicyCloudWatchAgentAdminPolicyAWS managed (predefined) policies for CloudWatch cross-account observabilityAWS managed (predefined) policies for CloudWatch investigationsAWS managed (predefined) policies for CloudWatch Application SignalsAWS managed (predefined) policies for CloudWatch SyntheticsAWS managed (predefined) policies for Amazon CloudWatch RUMAWS managed (predefined) policies for CloudWatch EvidentlyAWS managed policy for AWS Systems Manager Incident Manager
+Policy updatesCloudWatchFullAccessV2CloudWatchFullAccessCloudWatchReadOnlyAccessCloudWatchActionsEC2AccessCloudWatch-CrossAccountAccessCloudWatchAutomaticDashboardsAccessCloudWatchAgentServerPolicyCloudWatchAgentAdminPolicyAWS managed (predefined) policies for CloudWatch cross-account observabilityAWS managed (predefined) policies for CloudWatch investigationsAWS managed (predefined) policies for CloudWatch Application SignalsAWS managed (predefined) policies for CloudWatch SyntheticsAWS managed (predefined) policies for Amazon CloudWatch RUMAWS managed policy for AWS Systems Manager Incident Manager
@@ -43,2 +42,0 @@ The following AWS managed policies, which you can attach to users in your accoun
-  * AWS managed (predefined) policies for CloudWatch Evidently
-
@@ -129 +127 @@ CloudWatchReadOnlyAccess – Update to an existing policy |  CloudWatch added pe
-AmazonCloudWatchRUMReadOnlyAccess – Updated policy |  CloudWatch added permissions the **AmazonCloudWatchRUMReadOnlyAccess** policy. The `rum:ListRumMetricsDestinations` and `rum:BatchGetRumMetricsDefinitions` permissions were added so that CloudWatch RUM can send extended metrics to CloudWatch and Evidently. | October 27, 2022  
+AmazonCloudWatchRUMReadOnlyAccess – Updated policy |  CloudWatch added permissions the **AmazonCloudWatchRUMReadOnlyAccess** policy. The `rum:ListRumMetricsDestinations` and `rum:BatchGetRumMetricsDefinitions` permissions were added so that CloudWatch RUM can send extended metrics to CloudWatch. | October 27, 2022  
@@ -131 +128,0 @@ AmazonCloudWatchRUMReadOnlyAccess – Updated policy |  CloudWatch added permiss
-CloudWatchEvidentlyReadOnlyAccess – Update to an existing policy |  CloudWatch Evidently added permissions to **CloudWatchEvidentlyReadOnlyAccess**. The `evidently:GetSegment`, `evidently:ListSegments`, and `evidently:ListSegmentReferences` permissions were added so that users with this policy can see Evidently audience segments that have been created. | August 12, 2022  
@@ -135,2 +131,0 @@ AmazonCloudWatchRUMReadOnlyAccess – New policy |  CloudWatch added a new polic
-CloudWatchEvidentlyFullAccess – New policy |  CloudWatch added a new policy to enable full management of CloudWatch Evidently. CloudWatch Evidently allows you to perform A/B experiments of your web applications, and to roll them out gradually. For more information, see [Perform launches and A/B experiments with CloudWatch Evidently](./CloudWatch-Evidently.html). | November 29, 2021  
-CloudWatchEvidentlyReadOnlyAccess – New policy |  CloudWatch added a new policy to enable read-only access to CloudWatch Evidently. CloudWatch Evidently allows you to perform A/B experiments of your web applications, and to roll them out gradually. For more information, see [Perform launches and A/B experiments with CloudWatch Evidently](./CloudWatch-Evidently.html). | November 29, 2021  
@@ -398,12 +392,0 @@ To see the full contents of the policy, see [AmazonCloudWatchRUMServiceRolePolic
-## AWS managed (predefined) policies for CloudWatch Evidently
-
-The **CloudWatchEvidentlyFullAccess** and **CloudWatchEvidentlyReadOnlyAccess** AWS managed policies are available for you to assign to users who will manage or use CloudWatch Evidently.
-
-### CloudWatchEvidentlyFullAccess
-
-To see the full contents of the policy, see [CloudWatchEvidentlyFullAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/CloudWatchEvidentlyFullAccess.html) in the _AWS Managed Policy Reference Guide_.
-
-### CloudWatchEvidentlyReadOnlyAccess
-
-To see the full contents of the policy, see [CloudWatchEvidentlyReadOnlyAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/CloudWatchEvidentlyReadOnlyAccess.html) in the _AWS Managed Policy Reference Guide_.
-