AWS parallelcluster documentation change

Service: parallelcluster · 2026-03-22 · Documentation low

File: parallelcluster/latest/ug/iam-roles-in-parallelcluster-v3.md

Summary

Added IAM permissions for untagging resources (DynamoDB, CloudWatch, IAM) and logs:ListTagsForResource.

Security assessment

Adds documentation for tag management permissions, which are security-relevant for IAM role policies. However, no evidence of addressing a specific vulnerability.

Diff

diff --git a/parallelcluster/latest/ug/iam-roles-in-parallelcluster-v3.md b/parallelcluster/latest/ug/iam-roles-in-parallelcluster-v3.md
index 37f2d8985..7a1fe4733 100644
--- a//parallelcluster/latest/ug/iam-roles-in-parallelcluster-v3.md
+++ b//parallelcluster/latest/ug/iam-roles-in-parallelcluster-v3.md
@@ -149 +149,2 @@ JSON
-                    "dynamodb:TagResource"
+                    "dynamodb:TagResource",
+                    "dynamodb:UntagResource"
@@ -187 +188,3 @@ JSON
-                    "cloudwatch:PutCompositeAlarm"
+                    "cloudwatch:PutCompositeAlarm",
+                    "cloudwatch:TagResource",
+                    "cloudwatch:UntagResource"
@@ -308 +311,2 @@ JSON
-                    "logs:DeleteMetricFilter"
+                    "logs:DeleteMetricFilter",
+                    "logs:ListTagsForResource"
@@ -742 +746,2 @@ JSON
-                    "iam:TagRole"
+                    "iam:TagRole",
+                    "iam:UntagRole"