AWS healthimaging documentation change
Summary
Added release note for Study-level fine-grained access control feature, enabling IAM policies to use DICOM Study and Series Instance UIDs for permissions.
Security assessment
This change documents a new security feature that enhances access control granularity. It introduces the ability to use DICOM identifiers in IAM policies, which is a security improvement. However, there is no evidence that this change addresses a specific security vulnerability or incident; it is a feature addition.
Diff
diff --git a/healthimaging/latest/devguide/releases.md b/healthimaging/latest/devguide/releases.md index 9ced9d7d6..dbe7d8129 100644 --- a//healthimaging/latest/devguide/releases.md +++ b//healthimaging/latest/devguide/releases.md @@ -10,0 +11 @@ Change| Description| Date +Study-level fine-grained access control| HealthImaging now supports granting permissions for DICOMweb APIs using DICOM Study Instance UIDs and Series Instance UIDs directly in IAM policies. For more information, see [Granting permissions based on Study Instance UID and Series Instance UID](https://docs.aws.amazon.com/healthimaging/latest/devguide/security-iam.html#security_iam_id-based-policy-examples-study-series-uid).| March 19, 2026