AWS awssupport documentation change

Service: awssupport · 2025-12-10 · Documentation medium

File: awssupport/latest/user/aws-managed-policies-aws-support.md

Summary

Added 145 new permissions to AWSSupportServiceRolePolicy for troubleshooting services including Security Hub, GuardDuty, and Network Firewall

Security assessment

Documents expanded access for support roles to security services but does not indicate remediation of a security flaw. Highlights security-relevant permissions added for operational troubleshooting purposes.

Diff

diff --git a/awssupport/latest/user/aws-managed-policies-aws-support.md b/awssupport/latest/user/aws-managed-policies-aws-support.md
index e66fd0662..f72549c0a 100644
--- a//awssupport/latest/user/aws-managed-policies-aws-support.md
+++ b//awssupport/latest/user/aws-managed-policies-aws-support.md
@@ -45,0 +46,25 @@ AWS Support Change | Description | Date
+AWSSupportServiceRolePolicy – Update to an existing policy |  Added 145 new permissions to the following services to perform actions that help troubleshoot customer issues related to billing, administrative, and technical support:
+
+  * AWS Amplify – To troubleshoot issues related to AWS Amplify.
+  * AWS AppSync – To debug issues related to AWS AppSync.
+  * AWS Outposts – To debug issues related to AWS Outposts.
+  * AWS Clean Rooms – To troubleshoot issues related to AWS Clean Rooms.
+  * AWS Compute Optimizer – To debug issues related to AWS Compute Optimizer.
+  * Amazon Connect – To debug issues related to Amazon Connect.
+  * Amazon DynamoDB – To debug issues related to Amazon DynamoDB.
+  * Amazon EMR – To troubleshoot issues related to Amazon EMR.
+  * Amazon Location Service – To troubleshoot issues related to Amazon Location Service;.
+  * Amazon GuardDuty – To debug issues related to Amazon GuardDuty.
+  * AWS Network Firewall – To debug issues related to AWS Network Firewall.
+  * AWS HealthOmics – To troubleshoot issues related to AWS HealthOmics.
+  * AWS Organizations – To debug issues related to AWS Organizations.
+  * Amazon S3 – To debug issues related to Amazon S3.
+  * Amazon S3 Tables – To debug issues related to Amazon S3 Tables.
+  * Amazon S3 Vectors – To debug issues related to Amazon S3 Vectors.
+  * Amazon SageMaker AI – To troubleshoot issues related to Amazon SageMaker AI.
+  * AWS Security Hub – To troubleshoot issues related to AWS Security Hub.
+  * Amazon SES – To debug issues related to Amazon SES.
+  * AWS Signer – To debug issues related to AWS Signer.
+  * AWS STS – To troubleshoot issues related to AWS STS.
+
+| December 08, 2025