AWS devopsagent documentation change

Service: devopsagent · 2026-07-10 · Documentation low

File: devopsagent/latest/userguide/aws-devops-agent-security-limiting-agent-access-in-an-aws-account.md

Summary

Added new required IAM permissions for CloudWatch Logs, DynamoDB, AWS Support, and Systems Manager. Modified Glue permission from GetPartitions to GetPartition.

Security assessment

The change updates IAM permissions documentation for limiting agent access, which is security-related documentation. However, there's no evidence of a specific security vulnerability being addressed - it appears to be routine permission updates for new integrations.

Diff

diff --git a/devopsagent/latest/userguide/aws-devops-agent-security-limiting-agent-access-in-an-aws-account.md b/devopsagent/latest/userguide/aws-devops-agent-security-limiting-agent-access-in-an-aws-account.md
index 70c0fb163..3f81aad53 100644
--- a//devopsagent/latest/userguide/aws-devops-agent-security-limiting-agent-access-in-an-aws-account.md
+++ b//devopsagent/latest/userguide/aws-devops-agent-security-limiting-agent-access-in-an-aws-account.md
@@ -79,0 +80,2 @@ Amazon Athena | `athena:GetQuery*`, `athena:StartQueryExecution`, `athena:StopQu
+Amazon CloudWatch Logs | `logs:GetLogRecord` | Retrieve individual log records when investigating application issues  
+Amazon DynamoDB | `dynamodb:Scan`, `dynamodb:Query`, `dynamodb:GetItem`, `dynamodb:BatchGetItem` | Read items from your DynamoDB tables during investigations  
@@ -81,2 +83 @@ Amazon S3 | `s3:GetObject`, `s3:ListBucket` | Read application data, logs, or co
-AWS Direct Connect | `directconnect:DescribeConnections`, `directconnect:DescribeDirectConnectGatewayAssociations`, `directconnect:DescribeDirectConnectGateways`, `directconnect:DescribeLags`, `directconnect:DescribeVirtualInterfaces` | Investigate network connectivity issues  
-AWS Glue | `glue:GetPartitions` | Read partition metadata from the Glue Data Catalog for Athena queries  
+AWS Glue | `glue:GetPartition` | Read partition metadata from the Glue Data Catalog for Athena queries  
@@ -83,0 +85,2 @@ AWS KMS | `kms:Decrypt` | Decrypt encrypted resources such as S3 objects
+AWS Support | `support:DescribeCommunications` | Read AWS Support case communications relevant to an investigation  
+AWS Systems Manager | `ssm:GetParameter` | Read Systems Manager parameters used by your applications