AWS awssupport documentation change
Summary
Updated policy documentation to clarify ELB terminology and explicitly reference security-related permissions (e.g., `GetAccountPublicAccessBlock` for S3 bucket checks)
Security assessment
The change documents the inclusion of the `GetAccountPublicAccessBlock` permission, which supports security checks for S3 bucket public access settings. While this highlights a security feature, there is no evidence of a resolved security vulnerability.
Diff
diff --git a/awssupport/latest/user/aws-managed-policies-for-trusted-advisor.md b/awssupport/latest/user/aws-managed-policies-for-trusted-advisor.md index 765ceeb66..31eb16b29 100644 --- a//awssupport/latest/user/aws-managed-policies-for-trusted-advisor.md +++ b//awssupport/latest/user/aws-managed-policies-for-trusted-advisor.md @@ -265 +265 @@ This policy includes the following permissions. - * `elasticloadbalancing` – Describes Elastic Load Balancing (ELB) account quotas and resources + * `elasticloadbalancing` – Describes ELB (ELB) account quotas and resources @@ -494 +494 @@ AWSTrustedAdvisorPriorityFullAccess and AWSTrustedAdvisorPriorityReadOnlyAccess -AWSTrustedAdvisorServiceRolePolicy – Update to an existing policy | Trusted Advisor added new actions to grant the `DescribeTargetGroups` and `GetAccountPublicAccessBlock` permissions. The `DescribeTargetGroup` permission is required for the **Auto Scaling Group Health Check** to retrieve non-Classic Load Balancers that are attached to an Auto Scaling group. The `GetAccountPublicAccessBlock` permission is required for the **Amazon S3 Bucket Permissions** check to retrieve the block public access settings for an AWS account. | August 10, 2021 +AWSTrustedAdvisorServiceRolePolicy – Update to an existing policy | Trusted Advisor added new actions to grant the `DescribeTargetGroups` and `GetAccountPublicAccessBlock` permissions. The `DescribeTargetGroup` permission is required for the **Amazon EC2 Auto Scaling Group Health Check** to retrieve non-Classic Load Balancers that are attached to an Amazon EC2 Auto Scaling group. The `GetAccountPublicAccessBlock` permission is required for the **Amazon S3 Bucket Permissions** check to retrieve the block public access settings for an AWS account. | August 10, 2021