AWS awssupport documentation change
Summary
Documented addition of 146 new permissions to AWSSupportServiceRolePolicy for debugging issues across various AWS services.
Security assessment
Change updates documentation for an IAM managed policy, detailing new permissions added for support purposes. While IAM policies are security-related, there is no evidence of a security vulnerability being addressed; it is a routine expansion of support capabilities.
Diff
diff --git a/awssupport/latest/user/aws-managed-policies-aws-support.md b/awssupport/latest/user/aws-managed-policies-aws-support.md index 51bea7030..ee8678c49 100644 --- a//awssupport/latest/user/aws-managed-policies-aws-support.md +++ b//awssupport/latest/user/aws-managed-policies-aws-support.md @@ -47,0 +48,25 @@ AWS Support Change | Description | Date +AWSSupportServiceRolePolicy – Update to an existing policy | Added 146 new permissions to the following services to perform actions that help troubleshoot customer issues related to billing, administrative, and technical support: + + * Amazon Managed Workflows for Apache Airflow Serverless – To debug issues related to Amazon Managed Workflows for Apache Airflow Serverless. + * AWS Backup – To debug issues related to AWS Backup. + * Amazon Bedrock Agent Core – To debug issues related to Amazon Bedrock Agent Core. + * Amazon Connect Campaigns – To debug issues related to Amazon Connect Campaigns. + * AWS Control Tower – To debug issues related to AWS Control Tower. + * AWS Device Farm – To debug issues related to AWS Device Farm. + * Amazon EC2 – To debug issues related to Amazon EC2. + * Amazon ECS – To debug issues related to Amazon ECS. + * Amazon EKS – To debug issues related to Amazon EKS. + * AWS Lambda – To debug issues related to AWS Lambda. + * Amazon Macie – To debug issues related to Amazon Macie. + * Amazon Route 53 Recovery Control Config – To debug issues related to Amazon Route 53 Recovery Control Config. + * Amazon Route 53 Recovery Readiness – To debug issues related to Amazon Route 53 Recovery Readiness. + * Amazon Route 53 Resolver – To debug issues related to Amazon Route 53 Resolver. + * Amazon Route 53 Global Resolver – To debug issues related to Amazon Route 53 Global Resolver. + * Amazon S3 on Outposts – To debug issues related to Amazon S3 on Outposts. + * AWS Security Hub – To debug issues related to AWS Security Hub. + * Amazon Simple Email Service – To debug issues related to Amazon Simple Email Service. + * Amazon Pinpoint SMS Voice – To debug issues related to Amazon Pinpoint SMS Voice. + * AWS Systems Manager for SAP – To debug issues related to AWS Systems Manager for SAP. + * Amazon WorkSpaces – To debug issues related to Amazon WorkSpaces. + +| April 21, 2026