AWS mgn: Changelog: add iam:CreateServiceLinkedRole to network migration policy
Summary
Added a changelog entry noting the AWSApplicationMigrationNetworkMigrationMultiAccount policy was updated to add iam:CreateServiceLinkedRole for creating the AWSServiceRoleForVPCTransitGateway service-linked role.
Security assessment
Documents an IAM permission addition (iam:CreateServiceLinkedRole) to a managed policy. It is IAM/authorization-adjacent documentation but describes a functional permission grant, not a fix for a specific vulnerability.
Evidence
+[AWSApplicationMigrationNetworkMigrationMultiAccount](./security-iam-awsmanpol-AWSApplicationMigrationNetworkMigrationMultiAccount.html#security-iam-awsmanpol-AWSApplicationMigrationNetworkMigrationMultiAccount.title) – Updated policy | Added `iam:CreateServiceLinkedRole` permission to create the `AWSServiceRoleForVPCTransitGateway` service-linked role, required for creation of Transit Gateway VPC attachments. | September 16, 2026
Diff
diff --git a/mgn/latest/ug/security-iam-awsmanpol.md b/mgn/latest/ug/security-iam-awsmanpol.md index cb6abc92a..14df3113e 100644 --- a//mgn/latest/ug/security-iam-awsmanpol.md +++ b//mgn/latest/ug/security-iam-awsmanpol.md @@ -26,0 +27 @@ Change | Description | Date +[AWSApplicationMigrationNetworkMigrationMultiAccount](./security-iam-awsmanpol-AWSApplicationMigrationNetworkMigrationMultiAccount.html#security-iam-awsmanpol-AWSApplicationMigrationNetworkMigrationMultiAccount.title) – Updated policy | Added `iam:CreateServiceLinkedRole` permission to create the `AWSServiceRoleForVPCTransitGateway` service-linked role, required for creation of Transit Gateway VPC attachments. | September 16, 2026 @@ -43 +44 @@ Updated the [AWSApplicationMigrationSSMAccess ](./security-iam-awsmanpol-AWSAppl -[AWSApplicationMigrationFullAccess ](./security-iam-awsmanpol-AWSApplicationMigrationFullAccess.html#security-iam-awsmanpol-AWSApplicationMigrationFullAccess.title)– Updated policy [AWSApplicationMigrationSSMAccess ](./security-iam-awsmanpol-AWSApplicationMigrationSSMAccess.html#security-iam-awsmanpol-AWSApplicationMigrationSSMAccess.title)– Updated policy [AWSApplicationMigrationReadOnlyAccess ](./security-iam-awsmanpol-AWSApplicationMigrationReadOnlyAccess.html#security-iam-awsmanpol-AWSApplicationMigrationReadOnlyAccess.title)– Created policy | Updated the AWSApplicationMigrationFullAccess policy to support both command and automation SSM documents for post-migration framework actions. Updated the AWSApplicationMigrationSSMAccess policy to support both command and automation SSM documents for the custom actions feature. Updated the AWSApplicationMigrationReadOnlyAccess policy to support the new import and export feature. | March 21, 2023 +[AWSApplicationMigrationFullAccess ](./security-iam-awsmanpol-AWSApplicationMigrationFullAccess.html#security-iam-awsmanpol-AWSApplicationMigrationFullAccess.title)– Updated policy [AWSApplicationMigrationSSMAccess ](./security-iam-awsmanpol-AWSApplicationMigrationSSMAccess.html#security-iam-awsmanpol-AWSApplicationMigrationSSMAccess.title)– Updated policy [AWSApplicationMigrationReadOnlyAccess ](./security-iam-awsmanpol-AWSApplicationMigrationReadOnlyAccess.html#security-iam-awsmanpol-AWSApplicationMigrationReadOnlyAccess.title)– Updated policy | Updated the AWSApplicationMigrationFullAccess policy to support both command and automation SSM documents for post-migration framework actions. Updated the AWSApplicationMigrationSSMAccess policy to support both command and automation SSM documents for the custom actions feature. Updated the AWSApplicationMigrationReadOnlyAccess policy to support the new import and export feature. | March 21, 2023