AWS workspaces-thin-client documentation change

Service: workspaces-thin-client · 2025-11-16 · Documentation medium

File: workspaces-thin-client/latest/ag/security-iam-awsmanpol.md

Summary

Removed the AmazonWorkSpacesThinClientMonitoringServiceRolePolicy section and associated JSON policy, indicating policy deprecation.

Security assessment

The removal of the policy section could reflect a permissions adjustment, but there is no explicit evidence in the diff that this was due to a security vulnerability. The change log entry does not mention security concerns.

Diff

diff --git a/workspaces-thin-client/latest/ag/security-iam-awsmanpol.md b/workspaces-thin-client/latest/ag/security-iam-awsmanpol.md
index 6a317d5ab..e6ff3d905 100644
--- a//workspaces-thin-client/latest/ag/security-iam-awsmanpol.md
+++ b//workspaces-thin-client/latest/ag/security-iam-awsmanpol.md
@@ -5 +5 @@
-AmazonWorkSpacesThinClientReadOnlyAccessAmazonWorkSpacesThinClientFullAccessAmazonWorkSpacesThinClientMonitoringServiceRolePolicyPolicy updates
+AmazonWorkSpacesThinClientReadOnlyAccessAmazonWorkSpacesThinClientFullAccessPolicy updates
@@ -174,45 +173,0 @@ JSON
-## AWS managed policy: AmazonWorkSpacesThinClientMonitoringServiceRolePolicy
-
-This AWS managed policy is attached to the service-linked role (AWSServiceRoleForAmazonWorkSpacesThinClientMonitoringServiceRolePolicy) that enables Amazon WorkSpaces Thin Client to publish operational metrics to your AWS account. The policy defines the permissions needed for the service to publish both service-specific and usage metrics to Amazon CloudWatch. .
-
-For more information about Service-Linked Roles, please refer to [Using service-linked roles for WorkSpaces Thin Client](https://docs.aws.amazon.com/workspaces-thin-client/latest/ag/using-service-linked-roles.html).
-
-**Permissions details**
-
-This policy includes the following permissions:
-
-  * `cloudwatch` (WorkSpaces Thin Client) – Allows WorkSpaces Thin Client to publish metrics to Amazon CloudWatch in specific namespaces (AWS/WorkSpacesThinClient and AWS/Usage).
-
-
-
-
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version":"2012-10-17",		 	 	 
-        "Statement": [
-            {
-                "Sid": "AllowCloudWatchPutMetricData",
-                "Effect": "Allow",
-                "Action": [
-                    "cloudwatch:PutMetricData"
-                ],
-                "Resource": "*",
-                "Condition": {
-                    "StringEquals": {
-                        "cloudwatch:namespace": [
-                            "AWS/WorkSpacesThinClient",
-                            "AWS/Usage"
-                        ]
-                    }
-                }
-            }
-        ]
-    }
-    
-
@@ -222,0 +178 @@ Change | Description | Date
+AmazonWorkSpacesThinClientMonitoringServiceRolePolicy – Removed policy |  WorkSpaces Thin Client removed the AmazonWorkSpacesThinClientMonitoringServiceRolePolicy section. | November 12, 2025