AWS msk documentation change
Summary
Added change history table documenting policy updates for IPv6 support and multi-VPC connectivity.
Security assessment
The change documents new permissions added to the managed policy for IPv6 and multi-VPC features. While these features enhance network security capabilities, the change itself is documentation of feature updates rather than addressing a specific vulnerability.
Diff
diff --git a/msk/latest/developerguide/security-iam-awsmanpol-KafkaServiceRolePolicy.md b/msk/latest/developerguide/security-iam-awsmanpol-KafkaServiceRolePolicy.md index 2b9d478c0..319b8a81f 100644 --- a//msk/latest/developerguide/security-iam-awsmanpol-KafkaServiceRolePolicy.md +++ b//msk/latest/developerguide/security-iam-awsmanpol-KafkaServiceRolePolicy.md @@ -8,0 +9,8 @@ You can't attach KafkaServiceRolePolicy to your IAM entities. This policy is att +The following table describes updates to the KafkaServiceRolePolicy managed policy since Amazon MSK started tracking changes. + +Change | Description | Date +---|---|--- +IPv6 connectivity support added to KafkaServiceRolePolicy – Update to an existing policy | Amazon MSK added permissions to KafkaServiceRolePolicy to enable IPv6 connectivity for MSK clusters. These permissions allow Amazon MSK to assign and unassign IPv6 addresses to network interfaces and modify network interface attributes in customer account. | November 17, 2025 +KafkaServiceRolePolicy – Update to an existing policy | Amazon MSK added permissions to support multi-VPC private connectivity. | March 8, 2023 +Amazon MSK started tracking changes | Amazon MSK started tracking changes for KafkaServiceRolePolicy managed policy. | March 8, 2023 +