AWS IAM: Added AccountAccessManagerServiceRolePolicy

Service: IAM · 2026-08-11 · Documentation high

File: IAM/latest/UserGuide/security-iam-awsmanpol.md · Type: iam

Summary

Introduced new managed policy for account access manager service-linked role.

Security assessment

Documents a new security-related managed policy enabling secure service operations for access management.

Evidence

+AccountAccessManagerServiceRolePolicy – Added managed policy | Account access manager added a service-linked role policy that allows the service to retrieve information about your Organizations accounts. | July 31, 2026

Diff

diff --git a/IAM/latest/UserGuide/security-iam-awsmanpol.md b/IAM/latest/UserGuide/security-iam-awsmanpol.md
index 924bb8fdc..5c4a90f82 100644
--- a//IAM/latest/UserGuide/security-iam-awsmanpol.md
+++ b//IAM/latest/UserGuide/security-iam-awsmanpol.md
@@ -7 +7 @@
-IAMReadOnlyAccessIAMUserChangePasswordIAMAccessAnalyzerFullAccessIAMAccessAnalyzerReadOnlyAccessAccessAnalyzerServiceRolePolicyIAMAuditRootUserCredentialsIAMCreateRootUserPasswordIAMDeleteRootUserCredentialsS3UnlockBucketPolicySQSUnlockQueuePolicyPolicy updates
+IAMReadOnlyAccessIAMUserChangePasswordIAMAccessAnalyzerFullAccessIAMAccessAnalyzerReadOnlyAccessAccessAnalyzerServiceRolePolicyIAMAuditRootUserCredentialsIAMCreateRootUserPasswordIAMDeleteRootUserCredentialsS3UnlockBucketPolicySQSUnlockQueuePolicyAccountAccessManagerServiceRolePolicyPolicy updates
@@ -9 +9 @@ IAMReadOnlyAccessIAMUserChangePasswordIAMAccessAnalyzerFullAccessIAMAccessAnalyz
-# AWS managed policies for AWS Identity and Access Management and Access Analyzer
+# AWS managed policies for AWS Identity and Access Management, IAM Access Analyzer, and account access manager
@@ -435 +435,16 @@ This policy is grouped into statements based on the set of permissions provided.
-## IAM and IAM Access Analyzer updates to AWS managed policies
+## AccountAccessManagerServiceRolePolicy
+
+You can't attach `AccountAccessManagerServiceRolePolicy` to your IAM entities. This policy is attached to a service-linked role that allows [account access manager](./account-access-manager.html) to perform actions on your behalf. For more information, see [Security in account access manager](./aam-security.html).
+
+### Service-level permissions
+
+This policy allows account access manager to retrieve information about your Organizations accounts to maintain accurate account membership for access management. Account access manager uses these permissions to detect when accounts leave your organization, verify whether trusted service access is enabled, and confirm account status before managing entitlements.
+
+  * **AWS Organizations** – Allows permissions to list accounts in the organization, verify whether trusted service access is enabled, and describe account status.
+
+
+
+
+To view the JSON policy, see [AccountAccessManagerServiceRolePolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AccountAccessManagerServiceRolePolicy.html) in the _AWS Managed Policy Reference Guide_.
+
+## IAM, IAM Access Analyzer and account access manager updates to AWS managed policies
@@ -440,0 +456 @@ Change | Description | Date
+AccountAccessManagerServiceRolePolicy – Added managed policy | Account access manager added a service-linked role policy that allows the service to retrieve information about your Organizations accounts. | July 31, 2026