AWS AmazonCloudWatch medium security documentation change
Summary
Added policy permission updates and renamed AppStream 2.0 metrics reference
Security assessment
The documentation update includes added permissions (ec2:DescribeManagedPrefixLists and ec2:GetManagedPrefixListEntries) to a security-related IAM policy, which enables better network security monitoring capabilities. This directly impacts security posture by expanding monitoring access.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/DocumentHistory.md b/AmazonCloudWatch/latest/monitoring/DocumentHistory.md index a203f7a84..9f5bcfe5d 100644 --- a//AmazonCloudWatch/latest/monitoring/DocumentHistory.md +++ b//AmazonCloudWatch/latest/monitoring/DocumentHistory.md @@ -10,0 +11 @@ Change| Description| Date +Updated CloudWatchNetworkFlowMonitorTopologyServiceRolePolicy managed policy with managed prefix lists permissions| CloudWatch added the `ec2:DescribeManagedPrefixLists` and `ec2:GetManagedPrefixListEntries` permissions to the CloudWatchNetworkFlowMonitorTopologyServiceRolePolicy managed policy to grant permissions for Network Flow Monitor to generate topology snapshots of managed prefix lists.| November 6, 2025 @@ -171 +172 @@ Amazon VPC VPN metrics | Added metrics for Amazon VPC VPN. | May 15, 2017 -AppStream 2.0 metrics | Added metrics for AppStream 2.0. | March 8, 2017 +WorkSpaces Applications metrics | Added metrics for WorkSpaces Applications. | March 8, 2017