AWS claude-platform documentation change

Service: claude-platform · 2026-05-31 · Documentation low

File: claude-platform/latest/userguide/iam-actions.md

Summary

Added new webhooks section with 6 actions for lifecycle notifications, expanded GetSkill action coverage, and updated action/group counts

Security assessment

The RotateWebhookSecret action implements secret rotation which is a security best practice. However, there's no evidence this addresses a specific vulnerability. The change primarily documents new features.

Diff

diff --git a/claude-platform/latest/userguide/iam-actions.md b/claude-platform/latest/userguide/iam-actions.md
index 6d2adcb5a..cebdb6def 100644
--- a//claude-platform/latest/userguide/iam-actions.md
+++ b//claude-platform/latest/userguide/iam-actions.md
@@ -26 +26 @@ The ARN region is always populated and matches the region the workspace is bound
-The service defines 58 actions across 14 groups. Actions follow the AWS `VerbNoun` convention and use verb discipline so that `Get*` and `List*` wildcards produce a clean read-only boundary.
+The service defines 65 actions across 15 groups. Actions follow the AWS `VerbNoun` convention and use verb discipline so that `Get*` and `List*` wildcards produce a clean read-only boundary.
@@ -70 +70 @@ Action | Routes authorized
-`GetSkill` |  `GET /v1/skills/{id}` `GET /v1/skills/{id}/versions` `GET /v1/skills/{id}/versions/{version}`  
+`GetSkill` |  `GET /v1/skills/{id}` `GET /v1/skills/{id}/versions` `GET /v1/skills/{id}/versions/{version}` `GET /v1/skills/{id}/versions/{version}/content`  
@@ -128,0 +129 @@ Action | Routes authorized
+`ProcessEnvironmentWork` |  Self-hosted environment worker routes  
@@ -163,0 +165,13 @@ Action | Routes authorized
+### Webhooks
+
+Lifecycle event notifications for sessions.
+
+Action | Routes authorized  
+---|---  
+`ListWebhooks` |  `GET /v1/webhooks`  
+`GetWebhook` |  `GET /v1/webhooks/{webhook_endpoint_id}`  
+`CreateWebhook` |  `POST /v1/webhooks`  
+`UpdateWebhook` |  `POST /v1/webhooks/{webhook_endpoint_id}`  
+`DeleteWebhook` |  `DELETE /v1/webhooks/{webhook_endpoint_id}`  
+`RotateWebhookSecret` |  `POST /v1/webhooks/{webhook_endpoint_id}/regenerate_signing_secret`  
+  
@@ -227,0 +242 @@ Method | Route | IAM action | CloudTrail event type
+`GET` |  `/v1/skills/{id}/versions/{version}/content` |  `GetSkill` |  Data