AWS AmazonCloudWatch documentation change
Summary
Added entry about AIOpsConsoleAdminPolicy update with Amazon Q permissions
Security assessment
Documents new permissions for Amazon Q integration with incident reports but does not address vulnerabilities. Adds security documentation by specifying access controls for investigative tooling.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/DocumentHistory.md b/AmazonCloudWatch/latest/monitoring/DocumentHistory.md index b68bdda81..33d7b97f4 100644 --- a//AmazonCloudWatch/latest/monitoring/DocumentHistory.md +++ b//AmazonCloudWatch/latest/monitoring/DocumentHistory.md @@ -10,0 +11,6 @@ Change| Description| Date +Updated CloudWatchReadOnlyAccess policy| CloudWatch updated [CloudWatchReadOnlyAccess](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/managed-policies-cloudwatch.html#managed-policies-cloudwatch-CloudWatchReadOnlyAccess) to include Resource Explorer permissions to support uninstrumented service functionalities in Application Signals. | November 20, 2025 +Updated CloudWatchFullAccessV2 policy| CloudWatch updated [CloudWatchFullAccessV2](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/managed-policies-cloudwatch.html#managed-policies-cloudwatch-CloudWatchFullAccessV2) to include Resource Explorer permissions to support uninstrumented service functionalities in Application Signals. | November 20, 2025 +Updated CloudWatchApplicationSignalsServiceRolePolicy policy| CloudWatch updated the policy to include `resource-explorer-2:Search` and `cloudtrail:CreateServiceLinkedChannel` to enable new Application Signals features. For more information, see [CloudWatchApplicationSignalsServiceRolePolicy](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/using-service-linked-roles.html#service-linked-role-signals).| November 20, 2025 +Updated CloudWatchApplicationSignalsReadOnlyAccess policy| CloudWatch updated [CloudWatchApplicationSignalsReadOnlyAccess](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/managed-policies-cloudwatch.html#managed-policies-cloudwatch-CloudWatchApplicationSignalsReadOnlyAccess) to include new Application Signals operation and OAM and Resource Explorer permissions to support change events, cross account and uninstrumented service functionalities in Application Signals. | November 20, 2025 +Updated CloudWatchApplicationSignalsFullAccess policy| CloudWatch updated [CloudWatchApplicationSignalsFullAccess](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/managed-policies-cloudwatch.html#managed-policies-cloudwatch-CloudWatchApplicationSignalsFullAccess) to include OAM and Resource Explorer permissions to support cross account and uninstrumented service functionalities in Application Signals. | November 20, 2025 +CloudWatch updated AIOpsConsoleAdminPolicy managed policy with Amazon Q permissions| CloudWatch updated the **AIOpsConsoleAdminPolicy** managed policy to include Amazon Q integration permissions. These permissions enable users to interact with CloudWatch investigations incident reports through Amazon Q's conversational interface. For more information see, [AIOpsConsoleAdminPolicy](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/auth-and-access-control-cw.html#managed-policies-QInvestigations-AIOpsConsoleAdminPolicy).| November 17, 2025 @@ -32 +38 @@ Updated AIOpsAssistantPolicy policy| CloudWatch updated the AIOpsAssistantPolicy -Update managed policy| CloudWatch updated the **AIOpsOperatorAccess** policy to permit validation of investigation groups across accounts. For more information, see [AIOpsOperatorAccess](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/managed-policies-cloudwatch-QInvestigations.html#managed-policies-QInvestigations-AIOpsOperatorAccess.html).| June 13, 2025 +Update managed policy| CloudWatch updated the **AIOpsOperatorAccess** policy to permit validation of investigation groups across accounts. For more information, see [AIOpsOperatorAccess](https://docs.aws.amazon.com//AmazonCloudWatch/latest/monitoring/managed-policies-cloudwatch-QInvestigations.html#managed-policies-QInvestigations-AIOpsOperatorAccess.html).| June 13, 2025 @@ -34,2 +40,2 @@ Update managed policy| CloudWatch updated the **AIOpsOperatorAccess** policy to -Added functionality| You can now monitor Amazon Aurora PostgreSQL Limitless Databases at the instance level from the Database Instance Dashboard. For more information, see [Monitoring Aurora Limitless databases with Database Insights](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/database-insights-limitless.html).| May 22, 2025 -Added functionality| You can now enable Application Signals for your applications on an existing Amazon EKS cluster using CloudWatch Observability add-on Auto monitor advanced configuration. For more information, see [Enable Application Signals on an Amazon EKS cluster using the CloudWatch Observability add-on advanced configuration](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Signals-Enable-EKS.html).| May 19, 2025 +Added functionality| You can now monitor Amazon Aurora PostgreSQL Limitless Databases at the instance level from the Database Instance Dashboard. For more information, see [Monitoring Aurora Limitless databases with Database Insights](https://docs.aws.amazon.com//AmazonCloudWatch/latest/monitoring/database-insights-limitless.html).| May 22, 2025 +Added functionality| You can now enable Application Signals for your applications on an existing Amazon EKS cluster using CloudWatch Observability add-on Auto monitor advanced configuration. For more information, see [Enable Application Signals on an Amazon EKS cluster using the CloudWatch Observability add-on advanced configuration](https://docs.aws.amazon.com//AmazonCloudWatch/latest/monitoring/CloudWatch-Application-Signals-Enable-EKS.html).| May 19, 2025 @@ -185 +191 @@ Added metrics for AWS Key Management Service | Added metrics for AWS Key Manage -Added metrics for the new Application Load Balancers supported by Elastic Load Balancing | Added metrics for Application Load Balancers. | August 11, 2016 +Added metrics for the new Application Load Balancers supported by ELB | Added metrics for Application Load Balancers. | August 11, 2016 @@ -207 +213 @@ New billing alerts | You can now monitor your AWS charges using Amazon CloudWat -New metrics | You can now access six new Elastic Load Balancing metrics that provide counts of various HTTP response codes. | October 19, 2011 +New metrics | You can now access six new ELB metrics that provide counts of various HTTP response codes. | October 19, 2011 @@ -212 +218 @@ Updated metrics retention | Amazon CloudWatch now retains the history of an ala -New feature | Added ability to send Amazon Simple Notification Service or Auto Scaling notifications when a metric has crossed a threshold. For more information, see [Alarms](./cloudwatch_concepts.html#CloudWatchAlarms). | December 2, 2010 +New feature | Added ability to send Amazon Simple Notification Service or Amazon EC2 Auto Scaling notifications when a metric has crossed a threshold. For more information, see [Alarms](./cloudwatch_concepts.html#CloudWatchAlarms). | December 2, 2010