AWS devopsagent documentation change

Service: devopsagent · 2026-04-25 · Documentation medium

File: devopsagent/latest/userguide/aws-devops-agent-security-devops-agent-iam-permissions.md

Summary

Replaced specific Performance Insights permissions with wildcard permissions (pi:Describe*, pi:Get*, pi:List*)

Security assessment

This change broadens IAM permissions from specific actions to wildcard permissions for Performance Insights API. While this expands the permission scope, there's no evidence it addresses a specific security issue. It appears to be simplifying the policy to cover more Performance Insights operations.

Diff

diff --git a/devopsagent/latest/userguide/aws-devops-agent-security-devops-agent-iam-permissions.md b/devopsagent/latest/userguide/aws-devops-agent-security-devops-agent-iam-permissions.md
index fecf2765c..13b98f17f 100644
--- a//devopsagent/latest/userguide/aws-devops-agent-security-devops-agent-iam-permissions.md
+++ b//devopsagent/latest/userguide/aws-devops-agent-security-devops-agent-iam-permissions.md
@@ -1119,5 +1119,3 @@ Provides permissions required by the AWS DevOps Agent to conduct investigations
-                    "pi:DescribeDimensionKeys",
-                    "pi:GetResourceMetadata",
-                    "pi:GetResourceMetrics",
-                    "pi:ListAvailableResourceDimensions",
-                    "pi:ListAvailableResourceMetrics",
+                    "pi:Describe*",
+                    "pi:Get*",
+                    "pi:List*",