AWS artifact documentation change

Service: artifact · 2026-07-04 · Documentation low

File: artifact/latest/ug/example-iam-policies.md

Summary

Added IAM policy examples for new compliance inquiries feature.

Security assessment

Provides IAM policies for managing compliance inquiries, enhancing security documentation for access control. No security vulnerability is addressed.

Diff

diff --git a/artifact/latest/ug/example-iam-policies.md b/artifact/latest/ug/example-iam-policies.md
index 0992e9eac..c09306c25 100644
--- a//artifact/latest/ug/example-iam-policies.md
+++ b//artifact/latest/ug/example-iam-policies.md
@@ -26,0 +27,2 @@ These policies are applicable in commercial AWS [Regions](https://docs.aws.amazo
+  * Example policies to manage compliance inquiries
+
@@ -621,0 +624,73 @@ The following policy grants permissions to view organizational agreements.
+###### Example policies to manage compliance inquiries
+
+###### Tip
+
+We recommend using the [AWSArtifactComplianceInquiriesReadOnlyAccess](security-iam-awsmanpol.html) or [AWSArtifactComplianceInquiriesFullAccess](security-iam-awsmanpol.html) managed policy instead of defining your own policy. 
+
+The following policy grants read-only permission to list, view, export compliance inquiries, and list tags for compliance inquiry resources.
+
+****
+    
+    
+    
+    {
+      "Version":"2012-10-17",
+      "Statement": [
+        {
+          "Sid": "ListComplianceInquiries",
+          "Effect": "Allow",
+          "Action": [
+            "artifact:ListComplianceInquiries"
+          ],
+          "Resource": "*"
+        },
+        {
+          "Sid": "ViewAndExportComplianceInquiries",
+          "Effect": "Allow",
+          "Action": [
+            "artifact:GetComplianceInquiryMetadata",
+            "artifact:ListComplianceInquiryQueries",
+            "artifact:ExportComplianceInquiry",
+            "artifact:ListTagsForResource"
+          ],
+          "Resource": "arn:aws:artifact:*:*:compliance-inquiry/*"
+        }
+      ]
+    }
+    
+
+The following policy grants full permission to create, list, view, export compliance inquiries, and manage tags for compliance inquiry resources.
+
+****
+    
+    
+    
+    {
+      "Version":"2012-10-17",
+      "Statement": [
+        {
+          "Sid": "ListAndCreateComplianceInquiries",
+          "Effect": "Allow",
+          "Action": [
+            "artifact:ListComplianceInquiries",
+            "artifact:CreateComplianceInquiry"
+          ],
+          "Resource": "*"
+        },
+        {
+          "Sid": "ViewExportAndTagComplianceInquiries",
+          "Effect": "Allow",
+          "Action": [
+            "artifact:GetComplianceInquiryMetadata",
+            "artifact:ListComplianceInquiryQueries",
+            "artifact:ExportComplianceInquiry",
+            "artifact:TagResource",
+            "artifact:UntagResource",
+            "artifact:ListTagsForResource"
+          ],
+          "Resource": "arn:aws:artifact:*:*:compliance-inquiry/*"
+        }
+      ]
+    }
+    
+