AWS awssupport documentation change
Summary
Added documentation for January 29, 2026 update to AWSSupportServiceRolePolicy listing 105 new permissions across 18 services for troubleshooting purposes, and corrected punctuation in an existing Amazon Location Service entry.
Security assessment
The change documents expanded permissions for AWS Support roles to troubleshoot services, but shows no evidence of addressing a specific vulnerability. While IAM policy updates are security-related, this is a routine capability expansion for support operations without security incident context. The permissions enable legitimate troubleshooting activities.
Diff
diff --git a/awssupport/latest/user/aws-managed-policies-aws-support.md b/awssupport/latest/user/aws-managed-policies-aws-support.md index 684cd4702..edad2ccc0 100644 --- a//awssupport/latest/user/aws-managed-policies-aws-support.md +++ b//awssupport/latest/user/aws-managed-policies-aws-support.md @@ -45,0 +46,26 @@ AWS Support Change | Description | Date +AWSSupportServiceRolePolicy – Update to an existing policy | Added 105 new permissions to the following services to perform actions that help troubleshoot customer issues related to billing, administrative, and technical support: + + * Amazon Bedrock – To troubleshoot issues related to Amazon Bedrock. + * Amazon Braket – To debug issues related to Amazon Braket. + * Amazon Connect – To debug issues related to Amazon Connect. + * Amazon Aurora DSQL – To troubleshoot issues related to Amazon Aurora DSQL. + * AWS Compute Optimizer – To debug issues related to AWS Compute Optimizer. + * Amazon Connect – To debug issues related to Amazon Connect. + * Amazon EBS – To debug issues related to Amazon EBS. + * Amazon EC2 – To troubleshoot issues related to Amazon EC2. + * Amazon EKS – To debug issues related to Amazon EKS. + * AWS Elastic Beanstalk – To debug issues related to AWS Elastic Beanstalk. + * AWS Glue – To troubleshoot issues related to AWS Glue. + * AWS IoT Greengrass – To debug issues related to AWS IoT Greengrass. + * AWS Invoicing – To debug issues related to AWS Invoicing. + * Amazon Kinesis Video Streams – To debug issues related to Amazon Kinesis Video Streams. + * AWS License Manager – To debug issues related to AWS License Manager. + * Amazon MemoryDB – To troubleshoot issues related to Amazon MemoryDB. + * Multi-party approval – To debug issues related to Multi-party approval. + * Amazon MQ – To troubleshoot issues related to Amazon MQ. + * Oracle Database@AWS – To troubleshoot issues related to Oracle Database@AWS. + * AWS Payment Cryptography – To debug issues related to AWS Payment Cryptography. + * Amazon RDS – To debug issues related to Amazon RDS. + * AWS Tax Settings – To troubleshoot issues related to AWS Tax Settings. + +| January 29, 2026 @@ -56 +82 @@ AWSSupportServiceRolePolicy – Update to an existing policy | Added 145 new pe - * Amazon Location Service – To troubleshoot issues related to Amazon Location Service;. + * Amazon Location Service – To troubleshoot issues related to Amazon Location Service.