AWS signin documentation change

Service: signin · 2025-11-22 · Documentation medium

File: signin/latest/userguide/security-iam-awsmanpol.md

Summary

Added documentation for new AWS managed policy 'SignInLocalDevelopmentAccess' enabling programmatic access via console credentials using OAuth2 authorization code and token exchange

Security assessment

Introduces documentation for a security feature (OAuth2-based credential exchange) but does not address a specific security vulnerability. The change focuses on enabling secure programmatic access methods rather than fixing an existing issue.

Diff

diff --git a/signin/latest/userguide/security-iam-awsmanpol.md b/signin/latest/userguide/security-iam-awsmanpol.md
index 21324a41c..381903d31 100644
--- a//signin/latest/userguide/security-iam-awsmanpol.md
+++ b//signin/latest/userguide/security-iam-awsmanpol.md
@@ -5 +5 @@
-AmazonManagedSignUpServicePolicyApplicationProvisioningPolicyPolicy updates
+AmazonManagedSignUpServicePolicyApplicationProvisioningPolicySignInLocalDevelopmentAccessPolicy updates
@@ -64,0 +65,19 @@ To view more details about the policy, including the latest version of the JSON
+## AWS managed policy: SignInLocalDevelopmentAccess
+
+The `SignInLocalDevelopmentAccess` policy grants permissions for programmatic access to AWS using your console credentials.
+
+You can attach `SignInLocalDevelopmentAccess` to your users, groups, and roles.
+
+**Permissions details**
+
+This policy includes the following permissions:
+
+  * **Authorizing OAuth2 access** \- Grants permission to authenticate through a browser and obtain an OAuth 2.0 authorization code for credential exchange 
+
+  * **OAuth2 token creation** \- Grants permission to exchange an authorization code for OAuth 2.0 access token and refresh token that can be used to access AWS services from developer tools and applications 
+
+
+
+
+For more information, see [Login with console credentials (Recommended)](./command-line-sign-in.html#command-line-sign-in-local-development). To view more details about the policy, including the latest version of the JSON policy document, see [SignInLocalDevelopmentAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/SignInLocalDevelopmentAccess.html) in the _AWS Managed Policy Reference Guide_.
+
@@ -70,0 +90 @@ Change | Description | Date
+SignInLocalDevelopmentAccess – New policy |  Added a new AWS managed policy that grants permissions for programmatic access to AWS using your existing console credentials. | November 19, 2025