AWS ground-station documentation change

Service: ground-station · 2025-11-22 · Documentation low

File: ground-station/latest/ug/security-iam-awsmanpol.md

Summary

Replaced inline JSON policies with links to AWS Managed Policy Reference Guide and added policy update changelog entry

Security assessment

Removal of inline JSON policies improves maintenance but doesn't address security vulnerabilities. Changelog entry describes feature enhancement ('enhanced operations') without explicit security context

Diff

diff --git a/ground-station/latest/ug/security-iam-awsmanpol.md b/ground-station/latest/ug/security-iam-awsmanpol.md
index 7ba863624..bc754f770 100644
--- a//ground-station/latest/ug/security-iam-awsmanpol.md
+++ b//ground-station/latest/ug/security-iam-awsmanpol.md
@@ -32,23 +32 @@ This policy includes the following permissions.
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version":"2012-10-17",		 	 	 
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Action": [
-                    "groundstation:RegisterAgent",
-                    "groundstation:UpdateAgentStatus",
-                    "groundstation:GetAgentConfiguration"
-                ],
-                "Resource": "*"
-            }
-        ]
-    }
-            
-    
+To view the latest version of the JSON policy document, see [AWSGroundStationAgentInstancePolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSGroundStationAgentInstancePolicy.html) in the AWS Managed Policy Reference Guide. 
@@ -73,22 +51 @@ This policy includes the following permissions.
-JSON
-    
-
-****
-    
-    
-    
-    {
-        "Version":"2012-10-17",		 	 	 
-        "Statement": [
-            {
-                "Effect": "Allow",
-                "Action": [
-                    "ec2:DescribeAddresses",
-                    "ec2:DescribeNetworkInterfaces"
-                ],
-                "Resource": "*"
-            }
-        ]
-    }
-            
-    
+To view the latest version of the JSON policy document, see [AWSServiceRoleForGroundStationDataflowEndpointGroupPolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSServiceRoleForGroundStationDataflowEndpointGroupPolicy.html) in the AWS Managed Policy Reference Guide. 
@@ -101,0 +59 @@ Change | Description | Date
+AWSGroundStationAgentInstancePolicy – Update to an existing policy |  AWS Ground Station added new permissions to allow agents to retrieve task response URLs for enhanced Ground Station operations. | November 13, 2025