AWS awssupport documentation change
Summary
Updated documentation for AWSSupportServiceRolePolicy to add 217 new permissions across multiple AWS services for troubleshooting support issues, including security-related services like AWS Security Incident Response and AWS WAF. Also made minor corrections to service names in an existing policy update section.
Security assessment
The change explicitly adds permissions for 'AWS Security Incident Response' and 'AWS WAF' under troubleshooting contexts, which are security-focused services. However, there's no evidence this addresses a specific security vulnerability; it appears to be routine expansion of support capabilities. The documentation now includes references to security services but doesn't fix or disclose any security flaws.
Diff
diff --git a/awssupport/latest/user/aws-managed-policies-aws-support.md b/awssupport/latest/user/aws-managed-policies-aws-support.md index 7729e4bf1..10344dc5e 100644 --- a//awssupport/latest/user/aws-managed-policies-aws-support.md +++ b//awssupport/latest/user/aws-managed-policies-aws-support.md @@ -47,0 +48,33 @@ AWS Support Change | Description | Date +AWSSupportServiceRolePolicy – Update to an existing policy | Added 217 new permissions to the following services to perform actions that help troubleshoot customer issues related to billing, administrative, and technical support: + + * AWS AI DevOps – To debug issues related to AWS AI DevOps. + * Amazon API Gateway – To debug issues related to Amazon API Gateway. + * AWS Batch – To debug issues related to AWS Batch. + * Amazon Bedrock – To debug issues related to Amazon Bedrock. + * AWS Certificate Manager – To debug issues related to AWS Certificate Manager. + * AWS CloudFormation – To debug issues related to AWS CloudFormation. + * Amazon CloudFront – To debug issues related to Amazon CloudFront. + * AWS CloudTrail – To debug issues related to AWS CloudTrail. + * Amazon Cognito Identity Pools – To debug issues related to Amazon Cognito Identity Pools. + * AWS Control Catalog – To debug issues related to AWS Control Catalog. + * AWS Elastic Beanstalk – To debug issues related to AWS Elastic Beanstalk. + * Amazon EMR Serverless – To debug issues related to Amazon EMR Serverless. + * AWS Entity Resolution – To debug issues related to AWS Entity Resolution. + * Amazon EventBridge Streaming for Apache Kafka – To debug issues related to Amazon EventBridge Streaming for Apache Kafka. + * AWS Identity Store – To debug issues related to AWS IAM Identity Center. + * Amazon Kendra – To debug issues related to Amazon Kendra. + * AWS Key Management Service – To debug issues related to AWS Key Management Service. + * Amazon Managed Streaming for Kafka – To debug issues related to Amazon Managed Streaming for Kafka. + * AWS Marketplace – To debug issues related to AWS Marketplace. + * Amazon OpenSearch Service – To debug issues related to Amazon OpenSearch Service. + * Amazon OpenSearch Serverless – To debug issues related to Amazon OpenSearch Serverless. + * Amazon Personalize – To debug issues related to Amazon Personalize. + * AWS Private Certificate Authority – To debug issues related to AWS Private Certificate Authority. + * Amazon S3 Tables – To debug issues related to Amazon S3 Tables. + * Amazon SageMaker – To debug issues related to Amazon SageMaker. + * AWS Security Incident Response – To debug issues related to AWS Security Incident Response. + * AWS Sustainability – To debug issues related to AWS Sustainability. + * Amazon VPC Lattice – To debug issues related to Amazon VPC Lattice. + * AWS WAF – To debug issues related to AWS WAF. + +| June 22, 2026 @@ -51 +84 @@ AWSSupportServiceRolePolicy – Update to an existing policy | Added 146 new pe - * AWS Backup – To debug issues related to AWS Backup. + * – To debug issues related to . @@ -53 +86 @@ AWSSupportServiceRolePolicy – Update to an existing policy | Added 146 new pe - * Amazon Connect Campaigns – To debug issues related to Amazon Connect Campaigns. + * Campaigns – To debug issues related to Campaigns. @@ -57 +90 @@ AWSSupportServiceRolePolicy – Update to an existing policy | Added 146 new pe - * Amazon ECS – To debug issues related to Amazon ECS. + * Amazon Elastic Container Service – To debug issues related to Amazon Elastic Container Service. @@ -66 +99 @@ AWSSupportServiceRolePolicy – Update to an existing policy | Added 146 new pe - * AWS Security Hub – To debug issues related to AWS Security Hub. + * AWS Security Hub CSPM – To debug issues related to AWS Security Hub CSPM. @@ -69 +102 @@ AWSSupportServiceRolePolicy – Update to an existing policy | Added 146 new pe - * AWS Systems Manager for SAP – To debug issues related to AWS Systems Manager for SAP. + * Amazon EC2 Systems Manager for SAP – To debug issues related to Amazon EC2 Systems Manager for SAP.