AWS secretsmanager medium security documentation change
Summary
Added entry for AWSSecretsManagerClientReadOnlyAccess policy update granting BatchGetSecretValue and ListSecrets permissions.
Security assessment
Documents expanded permissions in a security-related managed policy. Changes directly relate to access control (IAM permissions) for secrets management.
Diff
diff --git a/secretsmanager/latest/userguide/document-history.md b/secretsmanager/latest/userguide/document-history.md index 58d9ad3a1..a7e22a9e5 100644 --- a//secretsmanager/latest/userguide/document-history.md +++ b//secretsmanager/latest/userguide/document-history.md @@ -14,0 +15 @@ Change| Description| Date +Update to AWS managed policy| The `AWSSecretsManagerClientReadOnlyAccess` managed policy now includes `BatchGetSecretValue` and `ListSecrets` permissions. For information, see [Secrets Manager updates to AWS managed policies](https://docs.aws.amazon.com/secretsmanager/latest/userguide/reference_available-policies.html#security-iam-awsmanpol-updates).| June 2, 2026