Las traducciones son generadas a través de traducción automática. En caso de conflicto entre la traducción y la version original de inglés, prevalecerá la version en inglés.
AWS políticas administradas para AWS Config
Una política AWS gestionada es una política independiente creada y administrada por AWS. AWS las políticas administradas están diseñadas para proporcionar permisos para muchos casos de uso comunes, de modo que pueda empezar a asignar permisos a usuarios, grupos y funciones.
Ten en cuenta que es posible que las políticas AWS administradas no otorguen permisos con privilegios mínimos para tus casos de uso específicos, ya que están disponibles para que los usen todos los AWS clientes. Se recomienda definir políticas administradas por el cliente específicas para sus casos de uso a fin de reducir aún más los permisos.
No puedes cambiar los permisos definidos en AWS las políticas administradas. Si AWS actualiza los permisos definidos en una política AWS administrada, la actualización afecta a todas las identidades principales (usuarios, grupos y roles) a las que está asociada la política. AWS es más probable que actualice una política AWS administrada cuando Servicio de AWS se lance una nueva o cuando haya nuevas operaciones de API disponibles para los servicios existentes.
Para obtener más información, consulte Políticas administradas por AWS en la Guía del usuario de IAM.
AWS política gestionada: AWSConfigServiceRolePolicy
AWS Config usa la función vinculada a servicios denominada AWSServiceRoleForConfig para llamar a otros AWS servicios en su nombre. Cuando lo usas Consola de administración de AWS para configurar AWS Config, esta SLR se crea automáticamente AWS Config si seleccionas la opción de usar la AWS Config SLR en lugar de tu propia función de servicio AWS Identity and Access Management (IAM).
El SLR AWSServiceRoleForConfig contiene la política administrada AWSConfigServiceRolePolicy. Esta política administrada contiene permisos de solo lectura y solo escritura para los recursos y permisos de solo lectura para AWS Config los recursos de otros servicios compatibles. AWS Config La política proporciona un acceso integral para supervisar y registrar los cambios de configuración en toda la AWS infraestructura, incluidos los permisos para más de 100 AWS servicios, como los de computación, almacenamiento, redes, seguridad, análisis y aprendizaje automático.
La política incluye permisos para las siguientes categorías de servicios:
-
access-analyzer— Permite a los directores analizar los patrones de acceso y recuperar los hallazgos de seguridad. -
account— Permite a los directores recuperar la información de contacto de la cuenta. -
acmyacm-pca— Permite a los directores administrar los SSL/TLS certificados y las autoridades certificadoras privadas. -
airflow— Permite a los directores supervisar los entornos gestionados de Apache Airflow. -
amplifyyamplifyuibuilder— Permite a los directores supervisar las aplicaciones web y los componentes de la interfaz de usuario. -
aoss— Permite a los directores monitorear las recopilaciones OpenSearch sin servidor y las configuraciones de seguridad. -
app-integrations— Permite a los directores supervisar las configuraciones de integración de aplicaciones. -
appconfig— Permite a los directores supervisar las implementaciones de la configuración de las aplicaciones. -
appflow— Permite a los directores monitorear las configuraciones del flujo de datos entre las aplicaciones. -
application-autoscalingyapplication-signals— Permite a los directores supervisar las políticas de escalado automático y las métricas de rendimiento de las aplicaciones. -
appmesh— Permite a los directores supervisar las configuraciones de la malla de servicios. -
apprunner— Permite a los directores monitorear las aplicaciones y los servicios web en contenedores. -
appstream— Permite a los directores supervisar las configuraciones de streaming de las aplicaciones. -
appsync— Permite a los directores supervisar las configuraciones de la API de GraphQL. -
aps— Permite a los directores supervisar las configuraciones de monitoreo de Prometheus. -
apptest— Permite a los directores supervisar las configuraciones de prueba de las aplicaciones. -
arc-zonal-shift— Permite a los directores monitorear la disponibilidad de las configuraciones de los turnos zonales. -
athena— Permite a los directores supervisar las configuraciones de los motores de consulta y los catálogos de datos. -
auditmanager— Permite a los directores supervisar las evaluaciones de auditoría y cumplimiento. -
autoscalingyautoscaling-plans— Permite a los directores supervisar los grupos y planes de escalamiento automático. -
b2bi— Permite a los directores supervisar las configuraciones de integración entre empresas. -
backupybackup-gateway— Permite a los directores supervisar las políticas de respaldo y las configuraciones de las puertas de enlace. -
batch— Permite a los directores monitorear los entornos de computación por lotes y las colas de trabajos. -
bcm-data-exports— Permite a los directores supervisar las exportaciones de datos de facturación y administración de costos. -
bedrockybedrock-agentcore— Permite a los directores supervisar los modelos básicos y las configuraciones de los agentes de IA. -
billingconductor— Permite a los directores supervisar las configuraciones de los grupos de facturación. -
budgets— Permite a los directores monitorear las configuraciones y acciones presupuestarias. -
cassandra— Permite a los directores consultar las configuraciones de la base de datos gestionada de Cassandra. -
ce— Permite a los directores monitorear las configuraciones de informes de costos y uso. -
cleanroomsycleanrooms-ml— Permite a los directores supervisar las configuraciones de colaboración de datos y aprendizaje automático. -
cloud9— Permite a los directores supervisar las configuraciones del entorno de desarrollo en la nube. -
cloudformation— Permite a los directores monitorear la infraestructura como configuraciones de pila de códigos. -
cloudfront— Permite a los directores supervisar las configuraciones de la red de entrega de contenido. -
cloudtrail— Permite a los directores supervisar las configuraciones de registro de API y seguimiento de auditoría. -
cloudwatch— Permite a los directores supervisar las métricas, las alarmas y las configuraciones de los paneles. -
codeartifact— Permite a los directores monitorear las configuraciones de los repositorios de paquetes de software. -
codebuild— Permite a los directores supervisar las configuraciones de los proyectos de construcción. -
codecommit— Permite a los directores monitorear las configuraciones del repositorio de código fuente. -
codeconnections— Permite a los principales monitorear las conexiones de origen de terceros. -
codedeploy— Permite a los directores supervisar las configuraciones de implementación de las aplicaciones. -
codeguru-profilerycodeguru-reviewer— Permite a los directores supervisar el análisis del código y las configuraciones de creación de perfiles. -
codepipeline— Permite a los directores supervisar las configuraciones continuas de las canalizaciones de integración e implementación. -
codestar-connections— Permite a los directores supervisar las conexiones de las herramientas de los desarrolladores. -
cognito-identityycognito-idp— Permite a los directores supervisar las configuraciones de la identidad y del grupo de usuarios. -
comprehend— Permite a los directores monitorear las configuraciones de procesamiento del lenguaje natural. -
config— Permite a los directores gestionar el registro de la configuración y la supervisión del cumplimiento. -
connect— Permite a los directores supervisar las configuraciones de los centros de contacto.
Para obtener más información sobre los tipos de recursos compatibles, consulte Tipos de recursos compatibles para AWS Config yUso de Service-Linked roles para AWS Config.
Para ver más detalles sobre la política, incluyendo la última versión del documento de política JSON, consulte AWSConfigServiceRolePolicy en la Guía de referencia de políticas administradas de AWS .
Recomendado: utilice el Service-linked rol
Es recomendable utilizar el rol vinculado a servicios a menos que tenga un caso de uso concreto. Un rol vinculado a un servicio añade todos los permisos necesarios para que AWS Config se ejecute según lo esperado. Algunas características, como los registradores de configuración vinculados con servicios, requieren el uso del rol vinculado a servicios.
AWS política gestionada: AWS_ ConfigRole
Para registrar las configuraciones AWS de sus recursos, AWS Config necesita permisos de IAM para obtener los detalles de configuración de sus recursos. Si desea crear un rol de IAM para AWS Config, puede utilizar la política administrada AWS_ConfigRole y asociarla a su rol de IAM.
Esta política de IAM se actualiza cada vez que se AWS Config añade soporte para un tipo de AWS recurso. Esto significa que AWS Config seguirá teniendo los permisos necesarios para registrar los datos de configuración de los tipos de recursos compatibles mientras el ConfigRole rol AWS_ tenga adjunta esta política administrada. La política proporciona un acceso integral para supervisar y registrar los cambios de configuración en la AWS infraestructura, incluidos los permisos para más de 100 AWS servicios, como los de computación, almacenamiento, redes, seguridad, análisis y aprendizaje automático. Para obtener más información, consulte Tipos de recursos compatibles para AWS Config y Permisos para la función de IAM asignada a AWS Config.
Para ver más detalles sobre la política, incluida la versión más reciente del documento de políticas de JSON, consulte AWS_ ConfigRole en la Guía de referencia de políticas AWS administradas.
AWS política gestionada: AWSConfigUserAccess
Esta política de IAM proporciona acceso para su uso AWS Config, incluida la búsqueda por etiquetas en los recursos y la lectura de todas las etiquetas. Esto no proporciona permiso para configurar AWS Config, lo que requiere privilegios administrativos.
Consulte la política: AWSConfigUserAccess.
AWS política gestionada: ConfigConformsServiceRolePolicy
Para implementar y administrar los paquetes de conformidad, se AWS Config requieren permisos de IAM y ciertos permisos de otros AWS servicios. Estos permiten implementar y administrar los paquetes de conformidad con todas las funciones y se actualizan cada vez que se AWS Config añaden nuevas funciones a los paquetes de conformidad. Para obtener más información sobre los paquetes de conformidad, consulte Paquetes de conformidad.
Consulte la política: ConfigConformsServiceRolePolicy.
AWS política gestionada: AWSConfigRulesExecutionRole
Para implementar reglas Lambda AWS personalizadas, se AWS Config requieren permisos de IAM y ciertos permisos de otros AWS servicios. Estas permiten que AWS Lambda las funciones accedan a la AWS Config API y a las instantáneas de configuración que se AWS Config entregan periódicamente a Amazon S3. Las funciones que evalúan los cambios de configuración para las reglas AWS personalizadas de Lambda requieren este acceso y se actualiza cada vez que se AWS Config añaden nuevas funciones. Para obtener más información sobre las reglas Lambda AWS personalizadas, consulte Creación de reglas Lambda AWS Config personalizadas. Para obtener más información sobre las instantáneas de configuración, consulte Conceptos | Instantánea de configuración. Para obtener más información sobre la entrega de instantáneas de configuración, consulte Administrar el canal de entrega.
Consulte la política: AWSConfigRulesExecutionRole.
AWS política gestionada: AWSConfigMultiAccountSetupPolicy
Para implementar, actualizar y eliminar de forma centralizada AWS Config las reglas y los paquetes de conformidad en las cuentas de los miembros de una organización AWS Organizations, se AWS Config requieren permisos de IAM y ciertos permisos de otros AWS servicios. Esta política administrada se actualiza cada vez que AWS Config añade nuevas funciones a la configuración de varias cuentas. Para obtener más información, consulta Cómo administrar AWS Config las reglas en todas las cuentas de tu organización y Cómo administrar los paquetes de conformidad en todas las cuentas de tu organización.
Consulte la política: AWSConfigMultiAccountSetupPolicy.
AWS política gestionada: AWSConfigRoleForOrganizations
Para poder llamar AWS Config a las AWS Organizations API de solo lectura, se AWS Config requieren permisos de IAM y ciertos permisos de otros servicios. AWS Esta política administrada se actualiza cada vez que AWS Config añade nuevas funciones a la configuración de varias cuentas. Para obtener más información, consulta Cómo administrar AWS Config las reglas en todas las cuentas de tu organización y Cómo administrar los paquetes de conformidad en todas las cuentas de tu organización.
Consulte la política: AWSConfigRoleForOrganizations.
AWS política gestionada: AWSConfigRemediationServiceRolePolicy
Para poder AWS Config corregir NON_COMPLIANT los recursos en tu nombre, se AWS Config
requieren permisos de IAM y ciertos permisos de otros AWS servicios. Esta política administrada se actualiza cada vez que se AWS Config añaden nuevas funciones de corrección. Para obtener más información sobre la corrección, consulte Cómo corregir los recursos que no cumplen con las normas mediante reglas. AWS Config Para obtener más información sobre las condiciones que dan origen a los posibles resultados de la AWS Config evaluación, consulte Conceptos | Reglas. AWS Config
Consulte la política: AWSConfigRemediationServiceRolePolicy.
AWS Config actualizaciones de AWS políticas administradas
Vea los detalles sobre las actualizaciones de las políticas AWS administradas AWS Config desde que este servicio comenzó a rastrear estos cambios. Para recibir alertas automáticas sobre los cambios en esta página, suscríbase a la fuente RSS de la página del historial de AWS Config documentos.
| Cambio | Descripción | Fecha |
|---|---|---|
|
AWSConfigServiceRolePolicy— Permisos añadidos: access-analyzer:CheckNoPublicAccess, access-analyzer:, bedrock-agentcore:ValidatePolicy, bedrock-agentcore:ListEnforcedGuardrailsConfiguration, bedrock-agentcore:GetPaymentManager, bedrock-agentcore:GetPolicyEngineSummary, bedrock-agentcore:GetPolicySummary, bedrock-agentcore:, notifications:, nova-act:ListPaymentManagers, s3vectors:, sagents:ListPolicyEngineSummaries, nova-act:, s3vectors:, sagents:ListPolicySummaries, sagents hacedor de sabiduría:ListTagsForResource, hacedor de sabios:GetWorkflowDefinition, hacedor de sabios:, ListNotificationConfigurations ListWorkflowDefinitions GetIndex ListIndexes DescribeAlgorithm DescribeClusterSchedulerConfig DescribeFlowDefinition DescribeHumanTaskUi hacedor de sabios:DescribeLabelingJob, hacedor DescribeMlflowApp de sabios:DescribeOptimizationJob, hacedor de sabios:DescribeTrainingJob, hacedor de sabios:ListAlgorithms, hacedor ListClusterSchedulerConfigs de sabios:ListFlowDefinitions, hacedor de sabios:ListHumanTaskUis, hacedor de sabios:ListLabelingJobs, hacedor ListMlflowApps de sabios:ListOptimizationJobs, hacedor de sabios:ListTrainingJobs. |
Esta política ahora admite permisos adicionales para registrar los cambios de configuración en numerosos servicios. AWS |
1 de agosto de 2026 |
|
AWS_ConfigRole— Permisos añadidos: access-analyzer:, access-analyzer:CheckNoPublicAccess, bedrock-agentcore:ValidatePolicy, bedrock-agentcore:ListEnforcedGuardrailsConfiguration, bedrock-agentcore:, bedrock-agentcore:GetPaymentManager, bedrock-agentcore:GetPolicyEngineSummary, bedrock-agentcore:, notifications:, nova-act:, s3vectors:GetPolicySummary, sagents:, nova-act:, s3vectors:ListPaymentManagers, sagents:, sagents hacedor de sabiduría:ListPolicyEngineSummaries, hacedor de sabios:, hacedor de sabios:, ListPolicySummaries ListNotificationConfigurations ListTagsForResource GetWorkflowDefinition ListWorkflowDefinitions GetIndex ListIndexes DescribeAlgorithm DescribeClusterSchedulerConfig DescribeFlowDefinition DescribeHumanTaskUi hacedor de sabios:DescribeLabelingJob, hacedor DescribeMlflowApp de sabios:DescribeOptimizationJob, hacedor de sabios:DescribeTrainingJob, hacedor de sabios:ListAlgorithms, hacedor ListClusterSchedulerConfigs de sabios:ListFlowDefinitions, hacedor de sabios:ListHumanTaskUis, hacedor de sabios:ListLabelingJobs, hacedor ListMlflowApps de sabios:ListOptimizationJobs, hacedor de sabios:ListTrainingJobs. |
Esta política ahora admite permisos adicionales para registrar los cambios de configuración en numerosos servicios. AWS |
1 de agosto de 2026 |
|
AWSConfigServiceRolePolicy— Permisos añadidos: bedrock:GetAutomatedReasoningPolicy, bedrock-agentcore:GetBlueprint, bedrock:, bedrock-agentcore: GetFoundationModelGetPromptRouter, bedrock-agentcore:ListAutomatedReasoningPolicies, bedrock-agentcore:ListBlueprints, bedrock-agentcore:ListFoundationModels, bedrock-agentcore:GetApiKeyCredentialProvider, bedrock-agentcore:, bedrock-agentcore:GetOauth2CredentialProvider, bedrock-agentcore:GetPolicy, cloudtrail:, cloudwatch:, connect:, dynamodb:GetTokenVault, dynamodb:, dynamodb:, ListApiKeyCredentialProviders ListOauth2CredentialProviders ListPolicies GetTrail ListManagedInsightRules ListQueueEmailAddresses DescribeContributorInsights DescribeKinesisStreamingDestination GetResourcePolicy elasticloadbalancing:DescribeCapacityReservation, lambda:, lambda:, administrador de licencias:GetFunctionRecursionConfig, redshift:, redshift:GetFunctionScalingConfig, s3:, s3:, s3:ListTagsForResource, sagemaker:, sagemaker:DescribeClusterDbRevisions, sagemaker:, sagemaker:DescribeSnapshotCopyGrants, sagemaker:, sagemaker:GetBucketMetadataTableConfiguration, sagemaker:GetBucketOwnershipControls, sagemaker:, sagemaker:, sagemaker:GetMetricsConfiguration, sagemaker:DescribeAction, sagemaker:, sagemaker:DescribeArtifact, sagemaker:, sagemaker:DescribeAutoMLJob, sagemaker:, sagemaker:DescribeContext, sagemaker:, sagemaker:DescribeExperiment, sagemaker:, sagemaker:DescribeHub, sagemaker:, sagemaker:DescribeModelCardExportJob, sagemaker:, sagemaker:DescribeTrial, sagemaker:, sagemaker:DescribeTrialComponent, sagemaker:, sagemaker:DescribeWorkforce, sagemaker:, sagemaker:ListActions, sagemaker:, sagemaker:ListArtifacts, sagemaker:, sagemaker:ListContexts, sagemaker:, sagemaker:ListExperiments, sagemaker:, sagemaker: fabricante:ListHubs, hacedor de sabios:ListModelCardExportJobs, hacedor de sabios: ListMonitoringAlertsListTrialComponents, hacedor de sabios:ListTrials, hacedor de sabios:ListWorkforces. |
Esta política ahora admite permisos adicionales para registrar los cambios de configuración en numerosos servicios. AWS |
5 de mayo de 2026 |
|
AWS_ConfigRole— Permisos añadidos: bedrock:GetAutomatedReasoningPolicy, bedrock-agentcore:GetBlueprint, bedrock:, bedrock-agentcore: GetFoundationModelGetPromptRouter, bedrock-agentcore:ListAutomatedReasoningPolicies, bedrock-agentcore:ListBlueprints, bedrock-agentcore:ListFoundationModels, bedrock-agentcore:GetApiKeyCredentialProvider, bedrock-agentcore:, bedrock-agentcore:GetOauth2CredentialProvider, bedrock-agentcore:GetPolicy, cloudtrail:, cloudwatch:, connect:, dynamodb:GetTokenVault, dynamodb:, dynamodb:, ListApiKeyCredentialProviders ListOauth2CredentialProviders ListPolicies GetTrail ListManagedInsightRules ListQueueEmailAddresses DescribeContributorInsights DescribeKinesisStreamingDestination GetResourcePolicy elasticloadbalancing:DescribeCapacityReservation, lambda:, lambda:, administrador de licencias:GetFunctionRecursionConfig, redshift:, redshift:GetFunctionScalingConfig, s3:, s3:, s3:ListTagsForResource, sagemaker:, sagemaker:DescribeClusterDbRevisions, sagemaker:, sagemaker:DescribeSnapshotCopyGrants, sagemaker:, sagemaker:GetBucketMetadataTableConfiguration, sagemaker:GetBucketOwnershipControls, sagemaker:, sagemaker:, sagemaker:GetMetricsConfiguration, sagemaker:DescribeAction, sagemaker:, sagemaker:DescribeArtifact, sagemaker:, sagemaker:DescribeAutoMLJob, sagemaker:, sagemaker:DescribeContext, sagemaker:, sagemaker:DescribeExperiment, sagemaker:, sagemaker:DescribeHub, sagemaker:, sagemaker:DescribeModelCardExportJob, sagemaker:, sagemaker:DescribeTrial, sagemaker:, sagemaker:DescribeTrialComponent, sagemaker:, sagemaker:DescribeWorkforce, sagemaker:, sagemaker:ListActions, sagemaker:, sagemaker:ListArtifacts, sagemaker:, sagemaker:ListContexts, sagemaker:, sagemaker:ListExperiments, sagemaker:, sagemaker: fabricante:ListHubs, hacedor de sabios:ListModelCardExportJobs, hacedor de sabios: ListMonitoringAlertsListTrialComponents, hacedor de sabios:ListTrials, hacedor de sabios:ListWorkforces. |
Esta política ahora admite permisos adicionales para registrar los cambios de configuración en numerosos servicios. AWS |
5 de mayo de 2026 |
|
AWSConfigServiceRolePolicy— Permisos añadidos: auditmanager:, auditmanager:GetAssessmentFramework, auditmanager:GetControl, bcm-dashboards:, bcm-dashboards:ListAssessmentFrameworks, bcm-dashboards:ListControls, bcm-dashboards:, bedrock:GetDashboard, bedrock-agentcore:ListDashboards, bedrock-agentcore:, bedrock-agentcore:ListTagsForResource, bedrock-agentcore: GetEvaluationJobListEvaluationJobs, bedrock-agentcore:, bedrock-agentcore: núcleo:GetEvaluator, timbre:, timbre:, dms:GetOnlineEvaluationConfig, emr- GetPolicyEngine ListEvaluators ListOnlineEvaluationConfigs ListPolicyEngines DescribeAppInstance ListAppInstances ListTagsForResource ListInstanceProfiles containers:DescribeManagedEndpoint, emr-containers:ListTagsForResource, gameliftstreams:GetApplication, gameliftstreams:, gameliftstreams:GetStreamGroup, gameliftstreams:ListApplications, gameliftstreams:ListStreamGroups, globalaccelerator:, glue:ListTagsForResource, glue:, glue:DescribeAcceleratorAttributes, lambda:GetCatalog, medialive:GetCatalogs, mediapackage v2:ListSessions, mediapackage v2:DescribeNode, redposts:ListNodes, outposts:, qbusiness:GetChannelPolicy, mediapackage v2:, redposts:GetOriginEndpointPolicy, qbusiness:GetSite, mediapackage v2:ListSites, redposts:GetPolicy, qbusiness:DescribeDataShares, shift:, rtbfabric:GetInboundExternalLink, rtbfabric: GetSession ListCapacityProviders GetLink, rtbfabric:GetOutboundExternalLink, rtbfabric:, rtbfabric:GetRequesterGateway, rtbfabric:GetResponderGateway, rtbfabric:ListLinks, rtbfabric:, rtbfabric:ListRequesterGateways, rtbfabric:ListResponderGateways, s3 express:, s3 express:ListTagsForResource, s3 express:, s3 express:GetAccessPoint, s3 vectores:, s3 vectores:GetAccessPointPolicy, s3 vectores:GetAccessPointScope, sagemaker:, sagemaker:ListAccessPointsForDirectoryBuckets, sagemaker:, sagemaker:ListTagsForResource, sagemaker:, sagemaker:GetVectorBucket, sagemaker:GetVectorBucketPolicy, sagemaker:, sagemaker:ListTagsForResource, sagemaker:, sagemaker:ListVectorBuckets, sagemaker:DescribeAutoMLJobV2, sagemaker:, sagemaker:DescribeHyperParameterTuningJob, sagemaker:DescribePartnerApp, sagemaker:ListAutoMLJobs, sagemaker:, sagemaker::ListHyperParameterTuningJobs, sagemaker:ListPartnerApps, sagemaker:, catálogo de servicios:DescribeTagOption, servicecatalog:ListTagOptions, ssm-contacts:GetRotation, ssm-guiconnect:ListRotations, sso:GetConnectionRecordingPreferences, sso:GetPermissionsBoundaryForPermissionSet, textract:ListCustomerManagedPolicyReferencesInPermissionSet, textract:GetAdapter, textract:ListAdapters, textract: ListTagsForResourceDescribeWebApp, transfer:DescribeWebAppCustomization, transfer:ListWebApps, wisdom:getaiGuardrail, wisdom:listaiGuardrails. |
Esta política ahora admite permisos adicionales AWS para registrar los cambios de configuración en numerosos servicios. |
10 de marzo de 2026 |
|
AWS_ConfigRole— Permisos añadidos: auditmanager:, auditmanager:GetAssessmentFramework, auditmanager:GetControl, bcm-dashboards:, bcm-dashboards:ListAssessmentFrameworks, bcm-dashboards:ListControls, bcm-dashboards:, bedrock:GetDashboard, bedrock-agentcore:ListDashboards, bedrock-agentcore:, bedrock-agentcore:ListTagsForResource, bedrock-agentcore: GetEvaluationJobListEvaluationJobs, bedrock-agentcore:, bedrock-agentcore: núcleo:GetEvaluator, timbre:, timbre:, dms:GetOnlineEvaluationConfig, emr- GetPolicyEngine ListEvaluators ListOnlineEvaluationConfigs ListPolicyEngines DescribeAppInstance ListAppInstances ListTagsForResource ListInstanceProfiles containers:DescribeManagedEndpoint, emr-containers:ListTagsForResource, gameliftstreams:GetApplication, gameliftstreams:, gameliftstreams:GetStreamGroup, gameliftstreams:ListApplications, gameliftstreams:ListStreamGroups, globalaccelerator:, glue:ListTagsForResource, glue:, glue:DescribeAcceleratorAttributes, lambda:GetCatalog, medialive:GetCatalogs, mediapackage v2:ListSessions, mediapackage v2:DescribeNode, redposts:ListNodes, outposts:, qbusiness:GetChannelPolicy, mediapackage v2:, redposts:GetOriginEndpointPolicy, qbusiness:GetSite, mediapackage v2:ListSites, redposts:GetPolicy, qbusiness:DescribeDataShares, shift:, rtbfabric:GetInboundExternalLink, rtbfabric: GetSession ListCapacityProviders GetLink, rtbfabric:GetOutboundExternalLink, rtbfabric:, rtbfabric:GetRequesterGateway, rtbfabric:GetResponderGateway, rtbfabric:ListLinks, rtbfabric:, rtbfabric:ListRequesterGateways, rtbfabric:ListResponderGateways, s3 express:, s3 express:ListTagsForResource, s3 express:, s3 express:GetAccessPoint, s3 vectores:, s3 vectores:GetAccessPointPolicy, s3 vectores:GetAccessPointScope, sagemaker:, sagemaker:ListAccessPointsForDirectoryBuckets, sagemaker:, sagemaker:ListTagsForResource, sagemaker:, sagemaker:GetVectorBucket, sagemaker:GetVectorBucketPolicy, sagemaker:, sagemaker:ListTagsForResource, sagemaker:, sagemaker:ListVectorBuckets, sagemaker:DescribeAutoMLJobV2, sagemaker:, sagemaker:DescribeHyperParameterTuningJob, sagemaker:DescribePartnerApp, sagemaker:ListAutoMLJobs, sagemaker:, sagemaker::ListHyperParameterTuningJobs, sagemaker:ListPartnerApps, sagemaker:, catálogo de servicios:DescribeTagOption, servicecatalog:ListTagOptions, ssm-contacts:GetRotation, ssm-guiconnect:ListRotations, sso:GetConnectionRecordingPreferences, sso:GetPermissionsBoundaryForPermissionSet, textract:ListCustomerManagedPolicyReferencesInPermissionSet, textract:GetAdapter, textract:ListAdapters, textract: ListTagsForResourceDescribeWebApp, transfer:DescribeWebAppCustomization, transfer:ListWebApps, wisdom:getaiGuardrail, wisdom:listaiGuardrails. |
Esta política ahora admite permisos adicionales AWS para registrar los cambios de configuración en numerosos servicios. |
10 de marzo de 2026 |
|
AWSConfigServiceRolePolicy— Permisos añadidos: escalado automático de aplicaciones:DescribeScheduledActions, appsync:, cloudformation:, cloudformation:, cloudformation:, cloudfront:, cloudfront:GetApiAssociation, cloudfront:, connect:, cur:DescribeStacks, cur:, datazone:GetStackPolicy, datazone:, datazone:GetTemplate, datazone:, datazone:, datazone:GetKeyGroup, datazone:, datazone:GetMonitoringSubscription, datazone:, datazone:ListKeyGroups, datazone:ListEvaluationFormVersions, datazone:, datazone:, datazone:DescribeReportDefinitions, datazone:, datazone:ListTagsForResource, datazone:, datazone:GetDomainUnit, datazone:, datazone:, datazone:GetEnvironmentAction, datazone:, datazone:GetEnvironmentBlueprintConfiguration, datazone:, datazone:, datazone:GetEnvironmentProfile, datazone:, datazone:, zona:GetGroupProfile, zona de datos: GetSubscriptionTarget GetUserProfile ListDomainUnitsForParent ListEntityOwners ListEnvironmentActions ListEnvironmentBlueprintConfigurations, datazone:, datazone:ListEnvironmentProfiles, datazone:ListPolicyGrants, datazone:, datazone:ListProjectMemberships, docdb-elastic:, docdb-elastic:ListSubscriptionTargets, docdb-elastic:SearchGroupProfiles, docdb-elastic:, ec2:SearchUserProfiles, ec2:, fis:, detector de fraude:GetCluster, guardduty:, guardduty:ListClusters, guardduty:, guardduty:ListTagsForResource, guardduty:GetRouteServerAssociations, guardduty:, guardduty:GetRouteServerPropagations, guardduty:SearchTransitGatewayRoutes, guardduty:, guardduty:ListTagsForResource, guardduty:, guardduty:GetListElements, guardduty:GetListsMetadata, guardduty:, guardduty:GetThreatEntitySet, guardduty:, guardduty:GetTrustedEntitySet, guardduty:ListThreatEntitySets, guardduty:, guardduty:ListTrustedEntitySets, guardduty:, guardduty:, guardduty:GetCampaign, guardduty:, guardduty: iotfleetwise:ListCampaigns, iotfleetwise:DescribeComputationModel, iotsitewise:, iotsitewise:DescribeDataset, iotsitewise:ListComputationModels, iotsitewise:, iotwireless:, iotwireless:ListDatasets, kendra:, registros:, registros:GetWirelessDeviceImportTask, medialive:, medialive:, medialive:ListWirelessDeviceImportTasks, medialive:, medialive:ListDataSources, medialive:DescribeQueryDefinitions, medialive:, medialive:GetIntegration, medialive:ListIntegrations, medialive:, medialive:ListRouterOutputs, medialive:, medialive:DescribeMultiplex, medialive:, administrador de red:DescribeSdiSource, administrador de red:, medialive:GetCloudWatchAlarmTemplate, administrador de red:GetCloudWatchAlarmTemplateGroup, medialive:, administrador de red:GetEventBridgeRuleTemplate, medialive:, administrador de red:GetEventBridgeRuleTemplateGroup, medialive:, administrador de red:ListCloudWatchAlarmTemplateGroups, medialive:ListCloudWatchAlarmTemplates, administrador de red:, medialive:ListEventBridgeRuleTemplateGroups, administrador de red:, medialive:ListEventBridgeRuleTemplates, administrador de red:, medialive:ListSdiSources, administrador de red:, medialive:ListSignalMaps, administrador de red:GetConnectAttachment, medialive:, administrador de red:GetCoreNetwork, medialive: administrador de red: GetCoreNetworkPolicy, administrador de red:GetDirectConnectGatewayAttachment, administrador de red:GetSiteToSiteVpnAttachment, administrador de red:ListAttachments, notificaciones:ListCoreNetworks, notificaciones:GetEventRule, notificaciones:ListEventRules, notificaciones:ListManagedNotificationChannelAssociations, notificaciones:ListNotificationHubs, espacios de refactorización:GetApplication, espacios de refactorización:GetRoute, espacios de refactorización:ListRoutes, resource-explorer-2:GetDefaultView, route53 resolver:GetOutpostResolver, securityhub:ListOutpostResolvers, securityhub:DescribeOrganizationConfiguration, security hub: GetAggregator V2, securityhub:GetAutomationRuleV2, security hub:GetConfigurationPolicyAssociation, ListOrganizationalUnits securityhub:GetFindingAggregator, securityhub: ListAggregators V2, securityhub:ListAutomationRulesV2, securityhub:ListConfigurationPolicyAssociations, sms-voice:ListFindingAggregators, sms-voice:DescribeConfigurationSets, sms-voice:DescribeKeywords, sms-voice:DescribeProtectConfigurations, sms-voice:GetProtectConfigurationCountryRuleSet, sms-voice:ListPoolOriginationIdentities, sms-voice:ListTagsForResource, workspaces-web:GetTrustStore, workspaces-web:GetTrustStoreCertificate, workspaces-web:GetUserAccessLoggingSettings, workspaces-web:ListTagsForResource. |
Esta política ahora admite permisos adicionales para registrar los cambios de configuración en numerosos servicios. AWS |
17 de febrero de 2026 |
|
AWS_ConfigRole— Permisos añadidos: escalado automático de aplicaciones:DescribeScheduledActions, appsync:, cloudformation:, cloudformation:, cloudformation:, cloudfront:, cloudfront:GetApiAssociation, cloudfront:, connect:, cur:DescribeStacks, cur:, datazone:GetStackPolicy, datazone:, datazone:GetTemplate, datazone:, datazone:, datazone:GetKeyGroup, datazone:, datazone:GetMonitoringSubscription, datazone:, datazone:ListKeyGroups, datazone:ListEvaluationFormVersions, datazone:, datazone:, datazone:DescribeReportDefinitions, datazone:, datazone:ListTagsForResource, datazone:, datazone:GetDomainUnit, datazone:, datazone:, datazone:GetEnvironmentAction, datazone:, datazone:GetEnvironmentBlueprintConfiguration, datazone:, datazone:, datazone:GetEnvironmentProfile, datazone:, datazone:, zona:GetGroupProfile, zona de datos: GetSubscriptionTarget GetUserProfile ListDomainUnitsForParent ListEntityOwners ListEnvironmentActions ListEnvironmentBlueprintConfigurations, datazone:, datazone:ListEnvironmentProfiles, datazone:ListPolicyGrants, datazone:, datazone:ListProjectMemberships, docdb-elastic:, docdb-elastic:ListSubscriptionTargets, docdb-elastic:SearchGroupProfiles, docdb-elastic:, ec2:SearchUserProfiles, ec2:, fis:, detector de fraude:GetCluster, guardduty:, guardduty:ListClusters, guardduty:, guardduty:ListTagsForResource, guardduty:GetRouteServerAssociations, guardduty:, guardduty:GetRouteServerPropagations, guardduty:SearchTransitGatewayRoutes, guardduty:, guardduty:ListTagsForResource, guardduty:, guardduty:GetListElements, guardduty:GetListsMetadata, guardduty:, guardduty:GetThreatEntitySet, guardduty:, guardduty:GetTrustedEntitySet, guardduty:ListThreatEntitySets, guardduty:, guardduty:ListTrustedEntitySets, guardduty:, guardduty:, guardduty:GetCampaign, guardduty:, guardduty: iotfleetwise:ListCampaigns, iotfleetwise:DescribeComputationModel, iotsitewise:, iotsitewise:DescribeDataset, iotsitewise:ListComputationModels, iotsitewise:, iotwireless:, iotwireless:ListDatasets, kendra:, registros:, registros:GetWirelessDeviceImportTask, medialive:, medialive:, medialive:ListWirelessDeviceImportTasks, medialive:, medialive:ListDataSources, medialive:DescribeQueryDefinitions, medialive:, medialive:GetIntegration, medialive:ListIntegrations, medialive:, medialive:ListRouterOutputs, medialive:, medialive:DescribeMultiplex, medialive:, administrador de red:DescribeSdiSource, administrador de red:, medialive:GetCloudWatchAlarmTemplate, administrador de red:GetCloudWatchAlarmTemplateGroup, medialive:, administrador de red:GetEventBridgeRuleTemplate, medialive:, administrador de red:GetEventBridgeRuleTemplateGroup, medialive:, administrador de red:ListCloudWatchAlarmTemplateGroups, medialive:ListCloudWatchAlarmTemplates, administrador de red:, medialive:ListEventBridgeRuleTemplateGroups, administrador de red:, medialive:ListEventBridgeRuleTemplates, administrador de red:, medialive:ListSdiSources, administrador de red:, medialive:ListSignalMaps, administrador de red:GetConnectAttachment, medialive:, administrador de red:GetCoreNetwork, medialive: administrador de red: GetCoreNetworkPolicy, administrador de red:GetDirectConnectGatewayAttachment, administrador de red:GetSiteToSiteVpnAttachment, administrador de red:ListAttachments, notificaciones:ListCoreNetworks, notificaciones:GetEventRule, notificaciones:ListEventRules, notificaciones:ListManagedNotificationChannelAssociations, notificaciones:ListNotificationHubs, espacios de refactorización:GetApplication, espacios de refactorización:GetRoute, espacios de refactorización:ListRoutes, resource-explorer-2:GetDefaultView, route53 resolver:GetOutpostResolver, securityhub:ListOutpostResolvers, securityhub:DescribeOrganizationConfiguration, security hub: GetAggregator V2, securityhub:GetAutomationRuleV2, security hub:GetConfigurationPolicyAssociation, ListOrganizationalUnits securityhub:GetFindingAggregator, securityhub: ListAggregators V2, securityhub:ListAutomationRulesV2, securityhub:ListConfigurationPolicyAssociations, sms-voice:ListFindingAggregators, sms-voice:DescribeConfigurationSets, sms-voice:DescribeKeywords, sms-voice:DescribeProtectConfigurations, sms-voice:GetProtectConfigurationCountryRuleSet, sms-voice:ListPoolOriginationIdentities, sms-voice:ListTagsForResource, workspaces-web:GetTrustStore, workspaces-web:GetTrustStoreCertificate, workspaces-web:GetUserAccessLoggingSettings, workspaces-web:ListTagsForResource. |
Esta política ahora admite permisos adicionales para registrar los cambios de configuración en numerosos servicios. AWS |
17 de febrero de 2026 |
|
AWSConfigServiceRolePolicy— Política gestionada actualizada con permisos completos para el registro de la configuración de AWS recursos en más de 100 AWS servicios, incluidos los servicios de computación, almacenamiento, redes, seguridad, análisis y aprendizaje automático. |
Esta política ahora proporciona una documentación mejorada de los permisos de servicio y permite una supervisión integral de todos los AWS servicios que permiten AWS Config el registro de la configuración. |
27 de enero de 2026 |
|
AWS_ConfigRole— Política gestionada actualizada con permisos completos para el registro de la configuración de AWS recursos en más de 100 AWS servicios, incluidos los servicios de computación, almacenamiento, redes, seguridad, análisis y aprendizaje automático. |
Esta política ahora proporciona una documentación mejorada de los permisos de servicio y permite una supervisión integral de todos los AWS servicios que permiten AWS Config el registro de la configuración. |
27 de enero de 2026 |
|
AWS_ConfigRole— añadir «s3tables: ListTagsForResource «, «s3tables: «, «s3tables:GetTableBucketMetricsConfiguration» GetTableBucketStorageClass |
Esta política ahora admite permisos adicionales para S3Tables.. |
09 de enero de 2026 |
|
AWSConfigServiceRolePolicy— añadir «s3tables: ListTagsForResource «, «s3tables: «, «s3tables:GetTableBucketMetricsConfiguration» GetTableBucketStorageClass |
Esta política ahora admite permisos adicionales para S3Tables. |
09 de enero de 2026 |
|
AWS_ConfigRole— añada «lightailGetActiveNames»: «lightail:» «s3GetOperations»: GetBucketAbac |
Esta política ahora admite permisos adicionales para Amazon Lightsail y Amazon Simple Storage Service (Amazon S3). |
20 de noviembre de 2025 |
|
AWSConfigServiceRolePolicy— añada «lightailGetActiveNames»: «lightail:» «s3GetOperations»: GetBucketAbac |
Esta política ahora admite permisos adicionales para Amazon Lightsail y Amazon Simple Storage Service (Amazon S3). |
20 de noviembre de 2025 |
|
AWSConfigServiceRolePolicy— Política gestionada actualizada con permisos completos para el registro de la configuración de AWS recursos en más de 100 AWS servicios, incluidos los servicios de computación, almacenamiento, redes, seguridad, análisis y aprendizaje automático. |
Esta política ahora proporciona una documentación mejorada de los permisos de servicio y permite una supervisión integral de todos los AWS servicios que permiten AWS Config el registro de la configuración. |
11 de noviembre de 2025 |
|
AWS_ConfigRole— Política gestionada actualizada con permisos completos para el registro de la configuración de AWS recursos en varios servicios AWS Identity and Access Management, incluidos Amazon Elastic Compute Cloud, Amazon Simple Storage Service AWS Lambda, Amazon Relational Database Service y muchos otros. |
Esta política ahora admite permisos adicionales para registrar y supervisar de forma integral la configuración de los AWS recursos en todos los AWS servicios compatibles. |
10 de noviembre de 2025 |
|
AWS_ConfigRole— añadir «amplify:GetDomainAssociation» «amplify:ListDomainAssociations» «amplify:» appsync: ListTagsForResource «appsync:GetSourceApiAssociation» «bedrock:ListSourceApiAssociations» «bedrock:» «bedrock:GetFlow» «bedrock:ListAgentCollaborators» «cloudListFlows» «cloudformation:ListPrompts» «codeartifact:Trail:GetResourcePolicy» «codeartifact:DescribePublisher» «codeartifact:DescribePackageGroup» «codepipeline:» «codepipeline:ListAllowedRepositoriesForGroup» «codepipeline:ListPackageGroups» «connect:ListActionTypes» ««fecha límite:ListTagsForResource" «ec2:" «ec2:ListWebhooks" «ec DescribeTrafficDistributionGroup ListTrafficDistributionGroups ListFarms GetTransitGatewayRouteTablePropagations SearchLocalGatewayRoutes 2: SearchTransitGatewayMulticastGroups «entityresolution:GetMatchingWorkflow» «entityresolution:ListMatchingWorkflows» «iotsitewise:ListAssetModelCompositeModels» «iotsitewise:ListAssetModelProperties» «iotsitewise:ListAssetProperties» «iotsitewise: ListAssociatedAssetsListPublicKeys» «ivs:GetProvisionedConcurrencyConfig» «lambda:GetRuntimeManagementConfig» «lambda:ListFunctionEventInvokeConfigs» «lambda:ListFunctionUrlConfigs» «lambda:DescribePipe» «pipes:ListPipes» «quicksightDescribeRefreshSchedule»: ListRefreshSchedules «redshift-serverlessListSnapshotCopyConfigurations»: «redshift:GetResourcePolicy» «rolesanywhere:GetCrl» «rolesanywhere:ListCrls» «sagemakerDescribeApp»: «sagemakerDescribeUserProfile»: «sagemaker: ListApps«sagemaker:ListModelPackages» «sagemaker:ListUserProfiles» «secretsmanager:GetResourcePolicy» «securitylake:ListSubscribers» «securitylake:ListTagsForResource» «servicecatalog:DescribeServiceAction» «servicecatalog:ListApplications» «servicecatalog: ListAssociatedResourcesListProtectionGroups» «servicecatalog:ListTagsForResource» «shield:GetReplicationSet» «ssm-incidents:ListReplicationSets» «ssm:DescribeAssociation» «ssm:DescribePatchBaselines» «ssm: GetDefaultPatchBaselineGetPatchBaseline» «ssm:GetResourcePolicies» sm: "«ssm: ListAssociationsListResourceDataSync" «wafv2:ListLoggingConfigurations" «bedrock-agentcore:ListCodeInterpreters" «bedrock-agentcore:GetCodeInterpreter" «base -agentcore: ListBrowsers «bedrock-agentcore:GetBrowser» «bedrock-agentcore:ListAgentRuntimes» «bedrock-agentcore:GetAgentRuntime» «bedrock-agentcore:ListAgentRuntimeEndpoints» «bedrock-agentcore:GetAgentRuntimeEndpoint» |
Esta política ahora admite permisos adicionales para AWS Amplify Amazon Bedrock, AWS CloudTrail, CloudFormation, AWS CodeArtifact AWS CodePipeline, Connect Customer AWS Deadline Cloud, Amazon EC2 AWS Entity Resolution AWS IoT SiteWise,, Amazon IVS AWS Lambda, Amazon EventBridge, Amazon Quick, Amazon Redshift AWS Identity and Access Management Roles Anywhere, Amazon Redshift Serverless SageMaker AWS Secrets Manager, Amazon Security Lake AWS Service Catalog AWS Shield, Amazon EC2 Systems Manager y AWS WAFV2. AWS AppSync |
1 de octubre de 2025 |
|
AWSConfigServiceRolePolicy— añadir «amplify:GetDomainAssociation» «amplify:ListDomainAssociations» «amplify:ListTagsForResource» appsync: GetSourceApiAssociation «appsync:ListSourceApiAssociations» «bedrock:GetFlow» «bedrock:ListAgentCollaborators» «bedrock:ListFlows» «bedrock:ListPrompts» «cloudTrail:GetResourcePolicy» «cloudformation:DescribePublisher» «codeartifact:DescribePackageGroup» «codeartifact:ListAllowedRepositoriesForGroup» «codeartifact:ListPackageGroups» «codepipeline:ListActionTypes» «codepipeline:ListTagsForResource» «codepipeline:ListWebhooks» «connect:DescribeTrafficDistributionGroup» ««fecha límite:ListFarms" «ec2:GetTransitGatewayRouteTablePropagations" «ec2:SearchLocalGatewayRoutes" «ec ListTrafficDistributionGroups 2: SearchTransitGatewayMulticastGroups «entityresolution:GetMatchingWorkflow» «entityresolution:ListMatchingWorkflows» «iotsitewise:ListAssetModelCompositeModels» «iotsitewise:ListAssetModelProperties» «iotsitewise:ListAssetProperties» «iotsitewise: ListAssociatedAssetsListPublicKeys» «ivs:GetProvisionedConcurrencyConfig» «lambda:GetRuntimeManagementConfig» «lambda:ListFunctionEventInvokeConfigs» «lambda:ListFunctionUrlConfigs» «lambda:DescribePipe» «pipes:ListPipes» «quicksightDescribeRefreshSchedule»: ListRefreshSchedules «redshift-serverlessListSnapshotCopyConfigurations»: «redshift:GetResourcePolicy» «rolesanywhere:GetCrl» «rolesanywhere:ListCrls» «sagemakerDescribeApp»: «sagemakerDescribeUserProfile»: «sagemaker: ListApps«sagemaker:ListModelPackages» «sagemaker:ListUserProfiles» «secretsmanager:GetResourcePolicy» «securitylake:ListSubscribers» «securitylake:ListTagsForResource» «servicecatalog:DescribeServiceAction» «servicecatalog:ListApplications» «servicecatalog: ListAssociatedResourcesListProtectionGroups» «servicecatalog:ListTagsForResource» «shield:GetReplicationSet» «ssm-incidents:ListReplicationSets» «ssm:DescribeAssociation» «ssm:DescribePatchBaselines» «ssm: GetDefaultPatchBaselineGetPatchBaseline» «ssm:GetResourcePolicies» sm: "«ssm: ListAssociationsListResourceDataSync" «wafv2:ListLoggingConfigurations" «bedrock-agentcore:ListCodeInterpreters" «bedrock-agentcore:GetCodeInterpreter" «base -agentcore: ListBrowsers «bedrock-agentcore:GetBrowser» «bedrock-agentcore:ListAgentRuntimes» «bedrock-agentcore:GetAgentRuntime» «bedrock-agentcore:ListAgentRuntimeEndpoints» «bedrock-agentcore:GetAgentRuntimeEndpoint» |
Esta política ahora admite permisos adicionales para AWS Amplify Amazon Bedrock, AWS CloudTrail, CloudFormation, AWS CodeArtifact AWS CodePipeline, Connect Customer AWS Deadline Cloud, Amazon EC2 AWS Entity Resolution AWS IoT SiteWise,, Amazon IVS AWS Lambda, Amazon EventBridge, Amazon Quick, Amazon Redshift AWS Identity and Access Management Roles Anywhere, Amazon Redshift Serverless SageMaker AWS Secrets Manager, Amazon Security Lake AWS Service Catalog AWS Shield, Amazon EC2 Systems Manager y AWS WAFV2. AWS AppSync |
1 de octubre de 2025 |
|
AWS_ConfigRole— Agregue «arc-zonal-shift: «, «bedrock: GetAutoshiftObserverNotificationStatus «, «cloudtrail: «, «codeartifact: GetModelInvocationLoggingConfiguration «, «codeartifact: GetEventConfiguration «, «deadline: «, «deadline: «, «deadline: DescribeDomain «, «deadline: «, «deadline: GetDomainPermissionsPolicy «, «dms: «, «glue: GetFleet «, «kafkaconnect: GetQueueFleetAssociation «, «kafkaconnect: «, ListFleets «kafkaconnect: «, «kafkaconnect: ListQueueFleetAssociations «, «kafkaconnect: ListTagsForResource «, «kafkaconnect: «, DescribeDataMigrations «kafkaconnect: «, «kafkaconnect: ListMigrationProjects «, «kafkaconnect: GetDataCatalogEncryptionSettings «, «kafkaconnect: «, «kafkaconnect: DescribeCustomPlugin «, «kafkaconnect: «, «kafkaconnect: DescribeWorkerConfiguration «, «kafkaconnect: ListCustomPlugins «, «kafkaconnect: «, «kafkaconnect: ListTagsForResource «, «kafkaconnect: «kaconnect: ListWorkerConfigurations «, «kafkaconnect: «, «kafkaconnect: DescribeLakeFormationIdentityCenterConfiguration «, «lakeformation: «, «medialive: DescribeMultiplexProgram «,» medialive: ListMultiplexPrograms «, «mediapackagev2: GetChannelGroup «, «mediapackagev2: ListChannelGroups «, «rds: DescribeEngineDefaultParameters «, «rolesanywhere: GetProfile «, «rolesanywhere: GetTrustAnchor «, «rolesanywhere: ListProfiles «, «rolesanywhere: ListTagsForResource «, «rolesanywhere: «, ListTrustAnchors «s3: «, GetAccessGrant «s3: «, ListAccessGrants «secretsmanager: «, DescribeSecret «securitylake: «, ListDataLakeExceptions «securitylake: «, ListDataLakes «securitylake: «, «securitylake: ListLogSources «, «servicecatalog: GetAttributeGroup «, «servicecatalog: ListAttributeGroups «, «servicecatalog: ListServiceActions «, «servicecatalog: ListServiceActionsForProvisioningArtifact «, «ses: GetTrafficPolicy «, «ses: ListTagsForResource«, «ver: ListTrafficPolicies «, «rayo: GetGroup «, «rayo: GetGroups «, «rayo: GetSamplingRules «, «rayo:», ListResourcePolicies «rayo:ListTagsForResource» |
Esta política ahora admite permisos adicionales para Amazon Bedrock AWS ARC - Zonal Shift,,, AWS CloudTrail AWS CodeArtifact AWS Deadline Cloud AWS Database Migration Service AWS Glue, Amazon Managed Streaming para Apache Kafka AWS Identity and Access Management, Amazon CloudWatch Logs AWS Lake Formation, Amazon Relational Database Service AWS Elemental MediaLive AWS Elemental MediaPackage, Amazon Simple Storage Service, Amazon Security Lake AWS Secrets Manager, AWS Service Catalog Amazon Simple Email Service y. AWS X-Ray |
28 de julio de 2025 |
|
AWSConfigServiceRolePolicy – Add «arc-zonal-shift: GetAutoshiftObserverNotificationStatus «, «bedrock: GetModelInvocationLoggingConfiguration «, «cloudtrail: GetEventConfiguration «, «codeartifact: DescribeDomain «, «codeartifact: GetDomainPermissionsPolicy «, «deadline: GetFleet «, «deadline: GetQueueFleetAssociation «, «deadline: ListFleets «, «deadline: ListQueueFleetAssociations «, «deadline: ListTagsForResource «, «deadline: DescribeDataMigrations «, «dms: ListMigrationProjects «, «glue: GetDataCatalogEncryptionSettings «, «iam: ListPolicies «, «kafkaconnect: DescribeCustomPlugin «, «kafkaconnect: DescribeWorkerConfiguration «, «kafkaconnect: ListCustomPlugins «, «kafkaconnect: ListTagsForResource «, «kafkaconnect: ListWorkerConfigurations «, «lakeformation: DescribeLakeFormationIdentityCenterConfiguration «, «logs: DescribeIndexPolicies «, «logs: ListTagsForResource «, «medialive: DescribeMultiplexProgram«, «medialive: ListMultiplexPrograms «, «mediapackagev2: GetChannelGroup «, «mediapackagev2: ListChannelGroups «, «rds: DescribeEngineDefaultParameters «, «rolesanywhere: GetProfile «, «rolesanywhere: GetTrustAnchor «rolesanywhere: ListProfiles «, «rolesanywhere: ListTagsForResource «, «rolesanywhere: ListTrustAnchors «, «s3: GetAccessGrant «, «s3: ListAccessGrants «, «secretsmanager: DescribeSecret «, «securitylake: ListDataLakeExceptions «: ListDataLakes «, «securitylake: ListLogSources «, «servicecatalog: GetAttributeGroup «, «servicecatalog: ListAttributeGroups «, «servicecatalog: ListServiceActions «, «servicecatalog: ListServiceActionsForProvisioningArtifact «, «ses: GetTrafficPolicy «, «ses: ListTagsForResource «, «ses: ListTrafficPolicies «, «xray: GetGroup «, «xray: GetGroups «, «xray: GetSamplingRules «, «xray: ListResourcePolicies «, «xray: ListTagsForResource «, «arn:aws:apigateway: ::/account», «arn:aws:apigateway: ::/usageplans», «arn:aws:apigateway: ::/usageplans/». |
Esta política ahora admite permisos adicionales para AWS ARC - Zonal Shift Amazon Bedrock AWS CloudTrail AWS CodeArtifact AWS Deadline Cloud AWS Database Migration Service AWS Glue, AWS Identity and Access Management Amazon Managed Streaming for Apache Kafka, Amazon CloudWatch Logs AWS Lake Formation AWS Elemental MediaLive AWS Elemental MediaPackage, Amazon Relational Database Service, Amazon Simple Storage Service AWS Secrets Manager, Amazon Security Lake AWS Service Catalog, Amazon Simple Email Service y Amazon API Gateway. AWS X-Ray |
28 de julio de 2025 |
|
AWSConfigServiceRolePolicy— Añada «backup-gateway: GetHypervisor «, «backup-gateway: ListHypervisors «, «bcm-data-exports: GetExport «, «bcm-data-exports: ListExports «, «bcm-data-exports: ListTagsForResource «, «roca base: GetAgent «, «roca base: GetAgentActionGroup «, «roca base: GetAgentKnowledgeBase «, «base: GetDataSource «, «base: GetFlowAlias «, «base: GetFlowVersion «, «base: ListAgentActionGroups «, «roca base: ListAgentKnowledgeBases «, «roca base: ListDataSources «, «lecho rocoso: ListFlowAliases «, «lecho rocoso: ListFlowVersions «, BatchDescribeTypeConfigurations «formación de nubes: «, DescribeStackInstance «formación de nubes: DescribeStackSet «, «formación de nubes: ListStackInstances«, «cloudformation: ListStackSets «, «cloudfront: GetPublicKey «, «cloudfront: GetRealtimeLogConfig «, «cloudfront: ListPublicKeys «, «cloudfront: ListRealtimeLogConfigs «, «entityresolution: GetIdMappingWorkflow «, «entityresolution: GetSchemaMapping «, «entityresolution: ListIdMappingWorkflows «, «entityresolution: ListSchemaMappings «, «entityresolution: ListTagsForResource «, «entityresolution: «, GetSuiteDefinition «iotdeviceadvisor: «, ListSuiteDefinitions «iotdeviceadvisor: GetEventSourceMapping «, «lambda: ListEventSourceMappings «, «mediapackagev2: GetChannel «, «mediapackagev2: ListChannels «, «administrador de red: GetTransitGatewayPeering «, «administrador de red: ListPeerings «, «pca-connector- ad: GetDirectoryRegistration «, «pca-connector-ad: ListDirectoryRegistrations «, «pca-connector-ad: ListTagsForResource «, «rds: DescribeDBShardGroups «, «rds: DescribeIntegrations «, «redshift: DescribeIntegrations «, «s3tables: GetTableBucket «, «s3tables: GetTableBucketEncryption «, «s3tables: GetTableBucketMaintenanceConfiguration «, «s3tables: ListTableBuckets «, «ssm-quicksetup: GetConfigurationManager «, «ssm-quicksetup:ListConfigurationManagers» |
Esta política ahora admite permisos adicionales para AWS Backup gateway Amazon Bedrock, Amazon, AWS CloudFormation, CloudFront,, AWS Entity Resolution AWS IoT Core Device Advisor AWS Lambda AWS Network Manager AWS Private Certificate Authority, Amazon Relational Database Service, Amazon Redshift y Amazon S3 Tables, Quick Setup de AWS Systems Manager. Administración de facturación y costos de AWS |
18 de junio de 2025 |
AWS_ConfigRole— Añada «backup-gateway: GetHypervisor «, «backup-gateway: ListHypervisors «, «bcm-data-exports: GetExport «, «bcm-data-exports: ListExports «, «bcm-data-exports: ListTagsForResource «, «roca base: GetAgent «, «roca base: GetAgentActionGroup «, «roca base: GetAgentKnowledgeBase «, «base: GetDataSource «, «base: GetFlowAlias «, «base: GetFlowVersion «, «base: ListAgentActionGroups «, «roca base: ListAgentKnowledgeBases «, «roca base: ListDataSources «, «lecho rocoso: ListFlowAliases «, «lecho rocoso: ListFlowVersions «, BatchDescribeTypeConfigurations «formación de nubes: «, DescribeStackInstance «formación de nubes: DescribeStackSet «, «formación de nubes: ListStackInstances«, «cloudformation: ListStackSets «, «cloudfront: GetPublicKey «, «cloudfront: GetRealtimeLogConfig «, «cloudfront: ListPublicKeys «, «cloudfront: ListRealtimeLogConfigs «, «entityresolution: GetIdMappingWorkflow «, «entity resolution: GetSchemaMapping «, «entityresolution: ListIdMappingWorkflows «, «entityresolution: ListSchemaMappings «, «entityresolution: ListTagsForResource «, «entityresolution: «, GetSuiteDefinition «iotdeviceadvisor: «, ListSuiteDefinitions «iotdeviceadvisor: GetEventSourceMapping «, «lambda: ListEventSourceMappings «, «administrador de red: GetTransitGatewayPeering «, «administrador de red: ListPeerings «, «pca-connector-ad: GetDirectoryRegistration «, «pca-connector-ad: ListDirectoryRegistrations «, «pca- connector-ad: ListTagsForResource «, «rds: DescribeDBShardGroups «, «rds: DescribeIntegrations «, «redshift: DescribeIntegrations «, «s3tables: GetTableBucket «, «s3tables: GetTableBucketEncryption «, «s3tables: GetTableBucketMaintenanceConfiguration «, «s3tables: ListTableBuckets «, «ssm-quicksetup:», GetConfigurationManager «ssm-quicksetup:ListConfigurationManagers» |
Esta política ahora admite permisos adicionales para AWS Backup gateway Amazon Bedrock, Amazon, AWS CloudFormation, CloudFront,, AWS Entity Resolution AWS IoT Core Device Advisor AWS Lambda AWS Network Manager AWS Private Certificate Authority, Amazon Relational Database Service, Amazon Redshift y Amazon S3 Tables, Quick Setup de AWS Systems Manager. Administración de facturación y costos de AWS |
18 de junio de 2025 |
|
AWS_ConfigRole: añadir "bedrock:GetGuardrail", "bedrock:GetInferenceProfile", "bedrock:GetKnowledgeBase", "bedrock:ListGuardrails", "bedrock:ListInferenceProfiles", "bedrock:ListKnowledgeBases", "bedrock:ListTagsForResource" |
Esta política ahora admite permisos adicionales para Amazon Bedrock. |
27 de mayo de 2025 |
|
AWSConfigServiceRolePolicy: añadir "bedrock:GetGuardrail", "bedrock:GetInferenceProfile", "bedrock:GetKnowledgeBase", "bedrock:ListGuardrails", "bedrock:ListInferenceProfiles", "bedrock:ListKnowledgeBases", "bedrock:ListTagsForResource" |
Esta política ahora admite permisos adicionales para Amazon Bedrock. |
27 de mayo de 2025 |
|
AWS_ConfigRole: añadir "b2bi:GetPartnership", "b2bi:GetProfile", "b2bi:ListPartnerships", "b2bi:ListProfiles", "bedrock:ListAgents", "cleanrooms:GetConfiguredTable", "cleanrooms:GetConfiguredTableAnalysisRule", "cleanrooms:GetMembership", "cleanrooms:GetPrivacyBudgetTemplate", "cleanrooms:ListConfiguredTables", "cleanrooms:ListMemberships", "cleanrooms:ListPrivacyBudgetTemplates", "codeconnections:GetConnection", "codeconnections:ListConnections", "codeconnections:ListTagsForResource", "directconnect:DescribeConnections", "dms:DescribeReplicationConfigs", "logs:DescribeAccountPolicies", "logs:DescribeResourcePolicies", "macie2:ListAutomatedDiscoveryAccounts", "managedblockchain:GetAccessor", "managedblockchain:ListAccessors", "qbusiness:GetApplication", "qbusiness:ListApplications", "qbusiness:ListTagsForResource", "route53profiles:GetProfile", "route53profiles:GetProfileAssociation", "route53profiles:ListProfileAssociations", "route53profiles:ListProfiles", "route53profiles:ListTagsForResource", "s3:GetAccessGrantsInstance", "s3:GetAccessGrantsLocation", "s3:ListAccessGrantsInstances", "s3:ListAccessGrantsLocations", "sagemaker:DescribeCluster", "sagemaker:DescribeMlflowTrackingServer", "sagemaker:DescribeStudioLifecycleConfig", "sagemaker:ListClusters", "sagemaker:ListMlflowTrackingServers", "sagemaker:ListStudioLifecycleConfigs", "securityhub:DescribeStandardsControls", "securityhub:GetEnabledStandards", "ssm-contacts:GetContact", "ssm-contacts:GetContactChannel", "ssm-contacts:ListContactChannels", "ssm-contacts:ListContacts", "ssm-incidents:GetResponsePlan", "ssm-incidents:ListResponsePlans", "ssm-incidents:ListTagsForResource", "ssm:DescribeInstanceInformation" |
Esta política ahora admite permisos adicionales para Amazon Bedrock Intercambio de datos de AWS B2B,,, AWS Database Migration Service (AWS DMS) AWS Clean Rooms AWS CodeConnections AWS Direct Connect, Amazon CloudWatch Logs, Amazon Macie, Amazon Managed Blockchain, Amazon Q Business, Route 53 Profiles, Amazon Simple Storage Service (Amazon S3), Amazon SageMaker AI y Contacts AWS Security Hub CSPM y Administrador de incidentes de AWS Systems Manager. Administrador de incidentes de AWS Systems Manager AWS Systems Manager |
08 de abril de 2025 |
|
AWSConfigServiceRolePolicy: añadir "b2bi:GetPartnership", "b2bi:GetProfile", "b2bi:ListPartnerships", "b2bi:ListProfiles", "bedrock:ListAgents", "cleanrooms:GetConfiguredTable", "cleanrooms:GetConfiguredTableAnalysisRule", "cleanrooms:GetMembership", "cleanrooms:GetPrivacyBudgetTemplate", "cleanrooms:ListConfiguredTables", "cleanrooms:ListMemberships", "cleanrooms:ListPrivacyBudgetTemplates", "codeconnections:GetConnection", "codeconnections:ListConnections", "codeconnections:ListTagsForResource", "directconnect:DescribeConnections", "dms:DescribeReplicationConfigs", "logs:DescribeAccountPolicies", "logs:DescribeResourcePolicies", "macie2:ListAutomatedDiscoveryAccounts", "managedblockchain:GetAccessor", "managedblockchain:ListAccessors", "qbusiness:GetApplication", "qbusiness:ListApplications", "qbusiness:ListTagsForResource", "route53profiles:GetProfile", "route53profiles:GetProfileAssociation", "route53profiles:ListProfileAssociations", "route53profiles:ListProfiles", "route53profiles:ListTagsForResource", "s3:GetAccessGrantsInstance", "s3:GetAccessGrantsLocation", "s3:ListAccessGrantsInstances", "s3:ListAccessGrantsLocations", "sagemaker:DescribeCluster", "sagemaker:DescribeMlflowTrackingServer", "sagemaker:DescribeStudioLifecycleConfig", "sagemaker:ListClusters", "sagemaker:ListMlflowTrackingServers", "sagemaker:ListStudioLifecycleConfigs", "securityhub:DescribeStandardsControls", "securityhub:GetEnabledStandards", "ssm-contacts:GetContact", "ssm-contacts:GetContactChannel", "ssm-contacts:ListContactChannels", "ssm-contacts:ListContacts", "ssm-incidents:GetResponsePlan", "ssm-incidents:ListResponsePlans", "ssm-incidents:ListTagsForResource", "ssm:DescribeInstanceInformation" |
Esta política ahora admite permisos adicionales para Intercambio de datos de AWS B2B Amazon Bedrock,,, AWS Clean Rooms AWS CodeConnections, AWS Database Migration Service (AWS DMS) AWS Direct Connect, Amazon CloudWatch Logs, Amazon Macie, Amazon Managed Blockchain, Amazon Q Business, Route 53 Profiles, Amazon Simple Storage Service (Amazon S3) AWS Security Hub CSPM, Amazon SageMaker AI y Administrador de incidentes de AWS Systems Manager Administrador de incidentes de AWS Systems Manager
Contacts y. AWS Systems Manager Esta política ahora también admite el permiso de acceso a todos los nombres de dominio de Amazon API Gateway al incluir el patrón de recursos “ |
08 de abril de 2025 |
|
AWS_ConfigRole: añadir "ec2:GetAllowedImagesSettings" |
Esta política admite ahora permisos adicionales para Amazon Elastic Compute Cloud (Amazon EC2). |
4 de marzo de 2025 |
|
AWSConfigServiceRolePolicy: añadir "ec2:GetAllowedImagesSettings" |
Esta política admite ahora permisos adicionales para Amazon Elastic Compute Cloud (Amazon EC2). |
4 de marzo de 2025 |
|
AWS_ConfigRole: añadir "cleanrooms-ml:GetTrainingDataset", "cleanrooms-ml:ListTrainingDatasets", "comprehend:DescribeFlywheel", "comprehend:ListFlywheels", "comprehend:ListTagsForResource", "ec2:GetSnapshotBlockPublicAccessState", "omics:GetAnnotationStore", "omics:GetRunGroup", "omics:GetSequenceStore", "omics:GetVariantStore", "omics:ListAnnotationStores", "omics:ListRunGroups", "omics:ListSequenceStores", "omics:ListTagsForResource", "omics:ListVariantStores", "s3express:GetEncryptionConfiguration", "s3express:GetLifecycleConfiguration", "ses:GetDedicatedIpPool", "ses:GetDedicatedIps", and "ses:ListDedicatedIpPools" |
Esta política ahora admite permisos adicionales para AWS Clean Rooms Amazon Comprehend, Amazon Elastic Compute Cloud (Amazon EC2) AWS HealthOmics, Amazon Simple Storage Service (Amazon S3) y Amazon Simple Email Service (Amazon SES). |
16 de enero de 2025 |
|
AWSConfigServiceRolePolicy: añadir "cleanrooms-ml:GetTrainingDataset", "cleanrooms-ml:ListTrainingDatasets", "comprehend:DescribeFlywheel", "comprehend:ListFlywheels", "comprehend:ListTagsForResource", "ec2:GetSnapshotBlockPublicAccessState", "omics:GetAnnotationStore", "omics:GetRunGroup", "omics:GetSequenceStore", "omics:GetVariantStore", "omics:ListAnnotationStores", "omics:ListRunGroups", "omics:ListSequenceStores", "omics:ListTagsForResource", "omics:ListVariantStores", "s3express:GetEncryptionConfiguration", "s3express:GetLifecycleConfiguration", "ses:GetDedicatedIpPool", "ses:GetDedicatedIps", and "ses:ListDedicatedIpPools" |
Esta política ahora admite permisos adicionales para AWS Clean Rooms Amazon Comprehend, Amazon Elastic Compute Cloud (Amazon EC2) AWS HealthOmics, Amazon Simple Storage Service (Amazon S3) y Amazon Simple Email Service (Amazon SES). |
16 de enero de 2025 |
|
AWSConfigServiceRolePolicy: añadir "organizations:ListAWSServiceAccessForOrganization" |
Esta política ahora admite permisos adicionales para AWS Organizations. |
18 de diciembre de 2024 |
|
AWS_ConfigRole: añadir "app-integrations:GetApplication", "app-integrations:ListApplications", "app-integrations:ListTagsForResource", "appconfig:GetExtension", "appconfig:ListExtensions", "cloudtrail:GetInsightSelectors", "connect:DescribeQueue", "connect:DescribeRoutingProfile", "connect:DescribeSecurityProfile", "connect:ListQueueQuickConnects", "connect:ListQueues", "connect:ListRoutingProfileQueues", "connect:ListRoutingProfiles", "connect:ListSecurityProfileApplications", "connect:ListSecurityProfilePermissions", "connect:ListSecurityProfiles", "datazone:GetDomain", "datazone:ListDomains", "devops-guru:ListNotificationChannels", "glue:GetRegistry", "glue:ListRegistries", "identitystore:DescribeGroup", "identitystore:DescribeGroupMembership" "identitystore:ListGroupMemberships", "identitystore:ListGroups", "iot:DescribeThingGroup", "iot:DescribeThingType", "iot:ListThingGroups", "iot:ListThingTypes", "iotfleetwise:GetDecoderManifest", "iotfleetwise:GetFleet", "iotfleetwise:GetModelManifest", "iotfleetwise:GetSignalCatalog", "iotfleetwise:GetVehicle", "iotfleetwise:ListDecoderManifestNetworkInterfaces", "iotfleetwise:ListDecoderManifests", "iotfleetwise:ListDecoderManifestSignals", "iotfleetwise:ListFleets", "iotfleetwise:ListModelManifestNodes", "iotfleetwise:ListModelManifests", "iotfleetwise:ListSignalCatalogNodes", "iotfleetwise:ListSignalCatalogs", "iotfleetwise:ListTagsForResource", "iotfleetwise:ListVehicles", "iotwireless:GetDestination", "iotwireless:GetDeviceProfile", "iotwireless:GetWirelessGateway", "iotwireless:ListDestinations", "iotwireless:ListDeviceProfiles", "iotwireless:ListWirelessGateways", "ivschat:GetLoggingConfiguration", "ivschat:GetRoom" "ivschat:ListLoggingConfigurations", "ivschat:ListRooms", "ivschat:ListTagsForResource", "logs:GetLogAnomalyDetector", "logs:ListLogAnomalyDetectors", "oam:GetSink" "oam:GetSinkPolicy", "oam:ListSinks", "payment-cryptography:GetAlias", "payment-cryptography:GetKey", "payment-cryptography:ListAliases", "payment-cryptography:ListKeys", "payment-cryptography:ListTagsForResource", "rds:DescribeDBProxyTargetGroups", "rds:DescribeDBProxyTargets", "rekognition:DescribeProjects", "s3:GetStorageLensGroup", "s3:ListStorageLensGroups", "s3:ListTagsForResource", "scheduler:GetScheduleGroup", "scheduler:ListScheduleGroups", "scheduler:ListTagsForResource", "ssm:GetServiceSetting", "vpc-lattice:GetAccessLogSubscription", "vpc-lattice:GetService", "vpc-lattice:GetServiceNetwork", "vpc-lattice:GetTargetGroup", "vpc-lattice:ListAccessLogSubscriptions", "vpc-lattice:ListServiceNetworks", "vpc-lattice:ListServices", "vpc-lattice:ListTagsForResource", "vpc-lattice:ListTargetGroups", and "vpc-lattice:ListTargets" |
Esta política ahora admite permisos adicionales para AWS AppConfig Amazon Connect Customer, Amazon DataZone, Amazon DevOps Guru AWS Glue, Identity Store AWS IoT AWS IoT FleetWise AWS IoT Wireless, Amazon Interactive Video Service (Amazon IVS), Amazon CloudWatch Logs, Amazon CloudWatch Observability Access Manager AWS Payment Cryptography, Amazon Relational Database Service (Amazon RDS), Amazon Rekognition, Amazon Simple Storage Service (Amazon S3), Amazon EventBridge Scheduler y Amazon VPC Lattice. AWS CloudTrail AWS Systems Manager |
7 de noviembre de 2024 |
|
AWSConfigServiceRolePolicy: añadir "app-integrations:GetApplication", "app-integrations:ListApplications", "app-integrations:ListTagsForResource", "appconfig:GetExtension", "appconfig:ListExtensions", "cloudtrail:GetInsightSelectors", "connect:DescribeQueue", "connect:DescribeRoutingProfile", "connect:DescribeSecurityProfile", "connect:ListQueueQuickConnects", "connect:ListQueues", "connect:ListRoutingProfileQueues", "connect:ListRoutingProfiles", "connect:ListSecurityProfileApplications", "connect:ListSecurityProfilePermissions", "connect:ListSecurityProfiles", "datazone:GetDomain", "datazone:ListDomains", "devops-guru:ListNotificationChannels", "glue:GetRegistry", "glue:ListRegistries", "identitystore:DescribeGroup", "identitystore:DescribeGroupMembership" "identitystore:ListGroupMemberships", "identitystore:ListGroups", "iot:DescribeThingGroup", "iot:DescribeThingType", "iot:ListThingGroups", "iot:ListThingTypes", "iotfleetwise:GetDecoderManifest", "iotfleetwise:GetFleet", "iotfleetwise:GetModelManifest", "iotfleetwise:GetSignalCatalog", "iotfleetwise:GetVehicle", "iotfleetwise:ListDecoderManifestNetworkInterfaces", "iotfleetwise:ListDecoderManifests", "iotfleetwise:ListDecoderManifestSignals", "iotfleetwise:ListFleets", "iotfleetwise:ListModelManifestNodes", "iotfleetwise:ListModelManifests", "iotfleetwise:ListSignalCatalogNodes", "iotfleetwise:ListSignalCatalogs", "iotfleetwise:ListTagsForResource", "iotfleetwise:ListVehicles", "iotwireless:GetDestination", "iotwireless:GetDeviceProfile", "iotwireless:GetWirelessGateway", "iotwireless:ListDestinations", "iotwireless:ListDeviceProfiles", "iotwireless:ListWirelessGateways", "ivschat:GetLoggingConfiguration", "ivschat:GetRoom" "ivschat:ListLoggingConfigurations", "ivschat:ListRooms", "ivschat:ListTagsForResource", "logs:GetLogAnomalyDetector", "logs:ListLogAnomalyDetectors", "oam:GetSink" "oam:GetSinkPolicy", "oam:ListSinks", "payment-cryptography:GetAlias", "payment-cryptography:GetKey", "payment-cryptography:ListAliases", "payment-cryptography:ListKeys", "payment-cryptography:ListTagsForResource", "rds:DescribeDBProxyTargetGroups", "rds:DescribeDBProxyTargets", "rekognition:DescribeProjects", "s3:GetStorageLensGroup", "s3:ListStorageLensGroups", "s3:ListTagsForResource", "scheduler:GetScheduleGroup", "scheduler:ListScheduleGroups", "scheduler:ListTagsForResource", "ssm:GetServiceSetting", "vpc-lattice:GetAccessLogSubscription", "vpc-lattice:GetService", "vpc-lattice:GetServiceNetwork", "vpc-lattice:GetTargetGroup", "vpc-lattice:ListAccessLogSubscriptions", "vpc-lattice:ListServiceNetworks", "vpc-lattice:ListServices", "vpc-lattice:ListTagsForResource", "vpc-lattice:ListTargetGroups", and "vpc-lattice:ListTargets" |
Esta política ahora admite permisos adicionales para AWS AppConfig Amazon Connect Customer, Amazon DataZone, Amazon DevOps Guru AWS Glue, Identity Store AWS IoT AWS IoT FleetWise AWS IoT Wireless, Amazon Interactive Video Service (Amazon IVS), Amazon CloudWatch Logs, Amazon CloudWatch Observability Access Manager AWS Payment Cryptography, Amazon Relational Database Service (Amazon RDS), Amazon Rekognition, Amazon Simple Storage Service (Amazon S3), Amazon EventBridge Scheduler y Amazon VPC Lattice. AWS CloudTrail AWS Systems Manager |
7 de noviembre de 2024 |
|
AWS_ConfigRole: añadir "aoss:BatchGetCollection," "aoss:BatchGetLifecyclePolicy," "aoss:BatchGetVpcEndpoint," "aoss:GetAccessPolicy," "aoss:GetSecurityConfig," "aoss:GetSecurityPolicy," "aoss:ListAccessPolicies," "aoss:ListCollections," "aoss:ListLifecyclePolicies," "aoss:ListSecurityConfigs," "aoss:ListSecurityPolicies," "aoss:ListVpcEndpoints," "appstream:DescribeAppBlockBuilders," "backup:GetRestoreTestingPlan," "backup:GetRestoreTestingSelection", "backup:ListRestoreTestingPlans," "backup:ListRestoreTestingSelections," "cloudTrail:GetChannel, "cloudTrail:ListChannels," "glue:GetTrigger," "glue:ListTriggers, "imagebuilder:GetLifecyclePolicy," "imagebuilder:ListLifecyclePolicies," "iot:DescribeBillingGroup," "iot:ListBillingGroups," "ivs:GetEncoderConfiguration," "ivs:GetPlaybackRestrictionPolicy," "ivs:GetStage," "ivs:GetStorageConfiguration," "ivs:ListEncoderConfigurations," "ivs:ListPlaybackRestrictionPolicies," "ivs:ListStages," "ivs:ListStorageConfigurations," "mediaconnect:DescribeBridge", "mediaconnect:DescribeGatewa," "mediaconnect:ListBridges," "mediaconnect:ListGateways", "mediatailor:DescribeChannel," "mediatailor:DescribeLiveSource," "mediatailor:DescribeSourceLocation," "mediatailor:DescribeVodSource", "mediatailor:ListChannels," "mediatailor:ListLiveSources", "mediatailor:ListSourceLocations," "mediatailor:ListVodSources," "omics:GetWorkflow," "omics:ListWorkflows," "scheduler:GetSchedule," and "scheduler:ListSchedules" |
Esta política ahora admite permisos adicionales para Amazon OpenSearch Service Severless AppStream, Amazon AWS Backup, AWS CloudTrail, AWS Glue, EC2 Image Builder AWS IoT, Amazon Interactive Video Service (Amazon IVS) y Amazon EventBridge Scheduler. AWS Elemental MediaConnect AWS Elemental MediaTailor AWS HealthOmics |
16 de septiembre de 2024 |
|
AWSConfigServiceRolePolicy: añadir "aoss:BatchGetCollection," "aoss:BatchGetLifecyclePolicy," "aoss:BatchGetVpcEndpoint," "aoss:GetAccessPolicy," "aoss:GetSecurityConfig," "aoss:GetSecurityPolicy," "aoss:ListAccessPolicies," "aoss:ListCollections," "aoss:ListLifecyclePolicies," "aoss:ListSecurityConfigs," "aoss:ListSecurityPolicies," "aoss:ListVpcEndpoints," "appstream:DescribeAppBlockBuilders," "backup:GetRestoreTestingPlan," "backup:GetRestoreTestingSelection", "backup:ListRestoreTestingPlans," "backup:ListRestoreTestingSelections," "cloudTrail:GetChannel, "cloudTrail:ListChannels," "glue:GetTrigger," "glue:ListTriggers, "imagebuilder:GetLifecyclePolicy," "imagebuilder:ListLifecyclePolicies," "iot:DescribeBillingGroup," "iot:ListBillingGroups," "ivs:GetEncoderConfiguration," "ivs:GetPlaybackRestrictionPolicy," "ivs:GetStage," "ivs:GetStorageConfiguration," "ivs:ListEncoderConfigurations," "ivs:ListPlaybackRestrictionPolicies," "ivs:ListStages," "ivs:ListStorageConfigurations," "mediaconnect:DescribeBridge", "mediaconnect:DescribeGatewa," "mediaconnect:ListBridges," "mediaconnect:ListGateways", "mediatailor:DescribeChannel," "mediatailor:DescribeLiveSource," "mediatailor:DescribeSourceLocation," "mediatailor:DescribeVodSource", "mediatailor:ListChannels," "mediatailor:ListLiveSources", "mediatailor:ListSourceLocations," "mediatailor:ListVodSources," "omics:GetWorkflow," "omics:ListWorkflows," "scheduler:GetSchedule," and "scheduler:ListSchedules" |
Esta política ahora admite permisos adicionales para Amazon OpenSearch Service Severless, Amazon AppStream AWS Backup, EC2 Image Builder AWS CloudTrail AWS Glue AWS IoT, Amazon Interactive Video Service (Amazon IVS) y Amazon Scheduler. AWS Elemental MediaConnect AWS Elemental MediaTailor AWS HealthOmics EventBridge |
16 de septiembre de 2024 |
|
AWS_ConfigRole: añadir "elasticfilesystem:DescribeTags," "redshift:DescribeTags," and "ssm-sap:ListTagsForResource" |
Esta política ahora admite permisos adicionales para Amazon Elastic File System (Amazon EFS), Amazon Redshift y. AWS Systems Manager para SAP |
17 de junio de 2024 |
|
AWSConfigServiceRolePolicy: añadir "elasticfilesystem:DescribeTags," "redshift:DescribeTags," and "ssm-sap:ListTagsForResource" |
Esta política ahora admite permisos adicionales para Amazon Elastic File System (Amazon EFS), Amazon Redshift y. AWS Systems Manager para SAP |
17 de junio de 2024 |
| AWS_ConfigRole: añadir "aps:DescribeAlertManagerDefinition," "cloudwatch:DescribeAlarmsForMetric," "cognito-identity:DescribeIdentityPool, "cognito-identity:GetPrincipalTagAttributeMap," "elasticache:DescribeCacheSecurityGroups," "elasticache:DescribeUserGroups," "elasticache:DescribeUsers," "elasticache:DescribeGlobalReplicationGroups," "fsx:DescribeDataRepositoryAssociations," "glue:GetDatabase," "glue:GetDatabases," "iam:ListUsers," "lambda:GetLayerVersion," "lambda:ListLayers," "lambda:ListLayerVersions," "ram:GetPermission," "ram:ListPermissionAssociations," "ram:ListPermissions," "ram:ListPermissionVersions," "redshift-serverless:GetNamespace," "redshift-serverless:GetWorkgroup," "redshift-serverless:ListNamespaces," "redshift-serverless:ListTagsForResource," "redshift-serverless:ListWorkgroups," "sagemaker:DescribeInferenceExperiment," "sagemaker:ListInferenceExperiments," and "sns:GetSMSSandboxAccountStatus" |
Esta política ahora admite permisos adicionales para Amazon Managed Service para Prometheus, Amazon, Amazon Cognito CloudWatch, Amazon, Amazon FSx ElastiCache, AWS Identity and Access Management (IAM), AWS Glue,, Amazon Redshift Serverless AWS Lambda AWS RAM, Amazon SageMaker AI y Amazon Simple Notification Service (Amazon SNS). |
22 de febrero de 2024 |
| AWSConfigServiceRolePolicy: añadir "aps:DescribeAlertManagerDefinition," "cloudwatch:DescribeAlarmsForMetric," "cognito-identity:DescribeIdentityPool, "cognito-identity:GetPrincipalTagAttributeMap," "elasticache:DescribeCacheSecurityGroups," "elasticache:DescribeUserGroups," "elasticache:DescribeUsers," "elasticache:DescribeGlobalReplicationGroups," "fsx:DescribeDataRepositoryAssociations," "glue:GetDatabase," "glue:GetDatabases," "iam:ListUsers," "lambda:GetLayerVersion," "lambda:ListLayers," "lambda:ListLayerVersions," "ram:GetPermission," "ram:ListPermissionAssociations," "ram:ListPermissions," "ram:ListPermissionVersions," "redshift-serverless:GetNamespace," "redshift-serverless:GetWorkgroup," "redshift-serverless:ListNamespaces," "redshift-serverless:ListTagsForResource," "redshift-serverless:ListWorkgroups," "sagemaker:DescribeInferenceExperiment," "sagemaker:ListInferenceExperiments," and "sns:GetSMSSandboxAccountStatus" |
Esta política ahora admite permisos adicionales para Amazon Managed Service para Prometheus CloudWatch, Amazon, Amazon Cognito, Amazon ElastiCache, Amazon FSx AWS Glue, AWS Identity and Access Management (IAM),, AWS Lambda AWS RAM, Amazon Redshift Serverless, Amazon SageMaker AI y Amazon Simple Notification Service (Amazon SNS). |
22 de febrero de 2024 |
|
AWSConfigUserAccess— comienza a realizar un seguimiento de los cambios en esta política gestionada AWS Config AWS |
Esta política proporciona acceso para su uso AWS Config, incluida la búsqueda por etiquetas en los recursos y la lectura de todas las etiquetas. Esto no proporciona permiso para realizar la configuración AWS Config, lo que requiere privilegios de administrador. |
22 de febrero de 2024 |
| AWS_ConfigRole: añadir "appconfig:GetExtensionAssociation," "appconfig:ListExtensionAssociations," "aps:DescribeLoggingConfiguration," "dms:DescribeReplicationTaskAssessmentRuns," "iam:GetOpenIDConnectProvider," "iam:ListOpenIDConnectProviders," "kafka:DescribeVpcConnection," "kafka:GetClusterPolicy," "kafka:ListVpcConnections," "logs:DescribeMetricFilters," "organizations:ListDelegatedAdministrators," "s3:GetBucketPolicyStatus," "s3express:GetBucketPolicy," and "s3express:ListAllMyDirectoryBuckets" |
Esta política ahora admite permisos adicionales para AWS AppConfig Amazon Managed Service para Prometheus, AWS Database Migration Service (AWS DMS), (AWS Identity and Access Management) IAM, Amazon Managed Streaming para Apache Kafka (Amazon MSK), Amazon CloudWatch Logs y Amazon Simple Storage Service (Amazon S3). AWS Organizations |
5 de diciembre de 2023 |
| AWSConfigServiceRolePolicy: añadir "appconfig:GetExtensionAssociation," "appconfig:ListExtensionAssociations," "aps:DescribeLoggingConfiguration," "dms:DescribeReplicationTaskAssessmentRuns," "iam:GetOpenIDConnectProvider," "iam:ListOpenIDConnectProviders," "kafka:DescribeVpcConnection," "kafka:GetClusterPolicy," "kafka:ListVpcConnections," "logs:DescribeMetricFilters," "organizations:ListDelegatedAdministrators," "s3:GetBucketPolicyStatus," "s3express:GetBucketPolicy," and "s3express:ListAllMyDirectoryBuckets" |
Esta política ahora admite permisos adicionales para AWS AppConfig Amazon Managed Service for Prometheus, AWS Database Migration Service (AWS DMS), (AWS Identity and Access Management) IAM, Amazon Managed Streaming for Apache Kafka (Amazon MSK), Amazon CloudWatch Logs y Amazon Simple Storage Service (Amazon S3). AWS Organizations |
5 de diciembre de 2023 |
| AWS_ConfigRole: añadir "backup:DescribeProtectedResource," "cognito-identity:GetIdentityPoolRoles," "cognito-identity:ListIdentityPools," "cognito-identity:ListTagsForResource," "cognito-idp:DescribeIdentityProvider," "cognito-idp:DescribeResourceServer," "cognito-idp:DescribeUserPool," "cognito-idp:DescribeUserPoolClient," "cognito-idp:DescribeUserPoolDomain," "cognito-idp:GetGroup," "cognito-idp:GetUserPoolMfaConfig," "cognito-idp:ListGroups," "cognito-idp:ListIdentityProviders," "cognito-idp:ListResourceServers," "cognito-idp:ListUserPoolClients," "cognito-idp:ListUserPools," "cognito-idp:ListTagsForResource," "connect:DescribeEvaluationForm," "connect:DescribeInstanceStorageConfig," "connect:DescribePrompt," "connect:DescribeRule," "connect:DescribeUser," "connect:GetTaskTemplate," "connect:ListApprovedOrigins," "connect:ListEvaluationForms," "connect:ListInstanceStorageConfigs," "connect:ListIntegrationAssociations," "connect:ListPrompts," "connect:ListRules," "connect:ListSecurityKeys," "connect:ListTagsForResource," "connect:ListTaskTemplates," "connect:ListUsers," "emr-containers:DescribeVirtualCluster," "emr-containers:ListVirtualClusters," "emr-serverless:GetApplication," "emr-serverless:ListApplications," "groundstation:GetDataflowEndpointGroup," "groundstation:ListDataflowEndpointGroups," "m2:GetEnvironment," "m2:ListEnvironments," "m2:ListTagsForResource," "memorydb:DescribeAcls," "memorydb:DescribeClusters," "memorydb:DescribeParameterGroups," "memorydb:DescribeParameters," "memorydb:DescribeSubnetGroups," "organizations:ListRoots," "quicksight:DescribeAccountSubscription," "quicksight:DescribeDataSetRefreshProperties," "rds:DescribeEngineDefaultClusterParameters," "redshift:DescribeEndpointAccess," "redshift:DescribeEndpointAuthorization," "route53:GetChange," "route53:ListCidrBlocks," "route53:ListCidrLocations," "serviceCatalog:DescribePortfolioShares," "transfer:DescribeProfile," and "transfer:ListProfiles" |
Esta política ahora admite permisos adicionales para Amazon Cognito, Amazon Connect Customer, Amazon EMR AWS Ground Station AWS Mainframe Modernization, Amazon MemoryDB AWS Organizations, Amazon Quick, Amazon Relational Database Service (Amazon RDS), Amazon Redshift, Amazon Route 53 y AWS Transfer Family. AWS Service Catalog |
17 de noviembre de 2023 |
| AWS_ConfigRole: añadir "Sid": "AWSConfigServiceRolePolicyStatementID," "Sid": "AWSConfigSLRLogStatementID," "Sid": "AWSConfigSLRLogEventStatementID," and "Sid": "AWSConfigSLRApiGatewayStatementID" |
Esta política ahora añade identificadores de seguridad (SID) para |
17 de noviembre de 2023 |
| AWSConfigServiceRolePolicy: añadir "backup:DescribeProtectedResource," "cognito-identity:GetIdentityPoolRoles," "cognito-identity:ListIdentityPools," "cognito-identity:ListTagsForResource," "cognito-idp:DescribeIdentityProvider," "cognito-idp:DescribeResourceServer," "cognito-idp:DescribeUserPool," "cognito-idp:DescribeUserPoolClient," "cognito-idp:DescribeUserPoolDomain," "cognito-idp:GetGroup," "cognito-idp:GetUserPoolMfaConfig," "cognito-idp:ListGroups," "cognito-idp:ListIdentityProviders," "cognito-idp:ListResourceServers," "cognito-idp:ListUserPoolClients," "cognito-idp:ListUserPools," "cognito-idp:ListTagsForResource," "connect:DescribeEvaluationForm," "connect:DescribeInstanceStorageConfig," "connect:DescribePrompt," "connect:DescribeRule," "connect:DescribeUser," "connect:GetTaskTemplate," "connect:ListApprovedOrigins," "connect:ListEvaluationForms," "connect:ListInstanceStorageConfigs," "connect:ListIntegrationAssociations," "connect:ListPrompts," "connect:ListRules," "connect:ListSecurityKeys," "connect:ListTagsForResource," "connect:ListTaskTemplates," "connect:ListUsers," "emr-containers:DescribeVirtualCluster," "emr-containers:ListVirtualClusters," "emr-serverless:GetApplication," "emr-serverless:ListApplications," "groundstation:GetDataflowEndpointGroup," "groundstation:ListDataflowEndpointGroups," "m2:GetEnvironment," "m2:ListEnvironments," "m2:ListTagsForResource," "memorydb:DescribeAcls," "memorydb:DescribeClusters," "memorydb:DescribeParameterGroups," "memorydb:DescribeParameters," "memorydb:DescribeSubnetGroups," "organizations:ListRoots," "quicksight:DescribeAccountSubscription," "quicksight:DescribeDataSetRefreshProperties," "rds:DescribeEngineDefaultClusterParameters," "redshift:DescribeEndpointAccess," "redshift:DescribeEndpointAuthorization," "route53:GetChange," "route53:ListCidrBlocks," "route53:ListCidrLocations," "serviceCatalog:DescribePortfolioShares," "transfer:DescribeProfile," and "transfer:ListProfiles" |
Esta política ahora admite permisos adicionales para Amazon Cognito, Amazon Connect Customer, Amazon EMR AWS Ground Station AWS Mainframe Modernization, Amazon MemoryDB AWS Organizations, Amazon Quick, Amazon Relational Database Service (Amazon RDS), Amazon Redshift, Amazon Route 53 y AWS Transfer Family. AWS Service Catalog |
17 de noviembre de 2023 |
| AWSConfigServiceRolePolicy: añadir "Sid": "AWSConfigServiceRolePolicyStatementID," "Sid": "AWSConfigSLRLogStatementID," "Sid": "AWSConfigSLRLogEventStatementID," and "Sid": "AWSConfigSLRApiGatewayStatementID" |
Esta política ahora añade identificadores de seguridad (SID) para |
17 de noviembre de 2023 |
| AWS_ConfigRole: añadir "acm-pca:GetCertificateAuthorityCertificate," "appmesh:DescribeMesh," "appmesh:ListGatewayRoutes," "connect:DescribeInstance," "connect:DescribeQuickConnect," "connect:ListQuickConnects," "ecs:DescribeCapacityProviders," "evidently:GetSegment," "evidently:ListSegments," "grafana:DescribeWorkspace," "grafana:DescribeWorkspaceAuthentication," "grafana:DescribeWorkspaceConfiguration," "grafana:DescribeWorkspaceConfiguration," "guardduty:GetMemberDetectors," "inspector2:BatchGetAccountStatus," "inspector2:GetDelegatedAdminAccount," "inspector2:ListMembers," "iot:DescribeCACertificate," "iot:ListCACertificates," "iot:ListTagsForResource," "iottwinmaker:GetSyncJob," "iottwinmaker:ListSyncJobs," "kafka:ListTagsForResource," "kafkaconnect:DescribeConnector," "kafkaconnect:ListConnectors," "lambda:GetCodeSigningConfig," "lambda:ListCodeSigningConfigs," "lambda:ListTags," "networkmanager:GetConnectPeer," "organizations:DescribeOrganization," "organizations:ListTargetsForPolicy," "sagemaker:DescribeDataQualityJob," "sagemaker:DescribeModelExplainabilityJob," "sagemaker:ListDataQualityJob," and "sagemaker:ExplainabilityJob" |
Esta política ahora admite permisos adicionales para AWS Private CA Connect Customer, Amazon Elastic Container Service (Amazon ECS), Amazon CloudWatch Evidently, Amazon Managed Grafana GuardDuty, Amazon AWS IoT AWS IoT TwinMaker, Amazon Inspector, Amazon Managed Streaming for Apache Kafka (Amazon MSK) y Amazon SageMaker AI. AWS App Mesh AWS Lambda AWS Network Manager AWS Organizations |
4 de octubre de 2023 |
| AWSConfigServiceRolePolicy: añadir "acm-pca:GetCertificateAuthorityCertificate," "appmesh:DescribeMesh," "appmesh:ListGatewayRoutes," "connect:DescribeInstance," "connect:DescribeQuickConnect," "connect:ListQuickConnects," "ecs:DescribeCapacityProviders," "evidently:GetSegment," "evidently:ListSegments," "grafana:DescribeWorkspace," "grafana:DescribeWorkspaceAuthentication," "grafana:DescribeWorkspaceConfiguration," "grafana:DescribeWorkspaceConfiguration," "guardduty:GetMemberDetectors," "inspector2:BatchGetAccountStatus," "inspector2:GetDelegatedAdminAccount," "inspector2:ListMembers," "iot:DescribeCACertificate," "iot:ListCACertificates," "iot:ListTagsForResource," "iottwinmaker:GetSyncJob," "iottwinmaker:ListSyncJobs," "kafka:ListTagsForResource," "kafkaconnect:DescribeConnector," "kafkaconnect:ListConnectors," "lambda:GetCodeSigningConfig," "lambda:ListCodeSigningConfigs," "lambda:ListTags," "networkmanager:GetConnectPeer," "organizations:DescribeOrganization," "organizations:ListTargetsForPolicy," "sagemaker:DescribeDataQualityJob," "sagemaker:DescribeModelExplainabilityJob," "sagemaker:ListDataQualityJob," and "sagemaker:ExplainabilityJob" |
Esta política ahora admite permisos adicionales para AWS Private CA Connect Customer, Amazon Elastic Container Service (Amazon ECS), Amazon CloudWatch Evidently, Amazon Managed Grafana GuardDuty, Amazon AWS IoT AWS IoT TwinMaker, Amazon Inspector, Amazon Managed Streaming for Apache Kafka (Amazon MSK) y Amazon SageMaker AI. AWS App Mesh AWS Lambda AWS Network Manager AWS Organizations |
4 de octubre de 2023 |
| AWSConfigServiceRolePolicy: elimina "ssm:GetParameter" |
Esta política ahora elimina los permisos de AWS Systems Manager (Systems Manager). |
6 de septiembre de 2023 |
| AWS_ConfigRole: añadir "appmesh:DescribeGatewayRoute","appstream:DescribeStacks", "aps:ListTagsForResource", "cloudfront:GetFunction", "cloudfront:GetOriginAccessControl", "cloudfront:ListFunctions", "cloudfront:ListOriginAccessControls", "codeartifact:ListPackages", "codeartifact:ListPackageVersions", "codebuild:BatchGetReportGroups", "codebuild:ListReportGroups", "connect:ListInstanceAttributes", "connect:ListInstances", "glue:GetPartition", "glue:GetPartitions", "guardduty:GetAdministratorAccount", "iam:ListInstanceProfileTags", "inspector2:ListFilters", "iot:DescribeJobTemplate", "iot:DescribeProvisioningTemplate", "iot:ListJobTemplates", "iot:ListProvisioningTemplates", "iottwinmaker:GetComponentType", "iottwinmaker:ListComponentTypes", "iotwireless:GetFuotaTask", "iotwireless:GetMulticastGroup", "iotwireless:ListFuotaTasks", "iotwireless:ListMulticastGroups", "kafka:ListScramSecrets", "macie2:ListTagsForResource", "mediaconnect:ListTagsForResource", "networkmanager:GetConnectPeer", "networkmanager:ListConnectPeers", "organizations:DescribeEffectivePolicy", "organizations:DescribeResourcePolicy", "resource-explorer-2:GetIndex", "resource-explorer-2:ListIndexes", "resource-explorer-2:ListTagsForResource", "route53:ListCidrCollections", "s3:GetMultiRegionAccessPointPolicy", "s3:GetMultiRegionAccessPointPolicyStatus", and "sns:GetDataProtectionPolicy" |
Esta política ahora admite permisos adicionales para Amazon AWS App Mesh AWS CloudFormation, Amazon Connect Customer CloudFront AWS CodeArtifact AWS CodeBuild, Amazon AWS Identity and Access Management (IAM) AWS Glue GuardDuty, Amazon Inspector,,,, Amazon Managed Streaming para Apache Kafka, Amazon Macie,,, AWS Elemental MediaConnect, Amazon Route 53 AWS Network Manager AWS Organizations AWS Resource Explorer, Amazon Simple Storage Service (Amazon S3) y Amazon Simple Notification Service (Amazon SNS). AWS IoT AWS IoT TwinMaker AWS IoT Wireless |
28 de julio de 2023 |
| AWSConfigServiceRolePolicy: añadir "appmesh:DescribeGatewayRoute", "appstream:DescribeStacks", "aps:ListTagsForResource", "cloudfront:GetFunction", "cloudfront:GetOriginAccessControl", "cloudfront:ListFunctions", "cloudfront:ListOriginAccessControls", "codeartifact:ListPackages", "codeartifact:ListPackageVersions", "codebuild:BatchGetReportGroups", "codebuild:ListReportGroups", "connect:ListInstanceAttributes", "connect:ListInstances", "glue:GetPartition", "glue:GetPartitions", "guardduty:GetAdministratorAccount", "iam:ListInstanceProfileTags", "inspector2:ListFilters", "iot:DescribeJobTemplate", "iot:DescribeProvisioningTemplate", "iot:ListJobTemplates", "iot:ListProvisioningTemplates", "iottwinmaker:GetComponentType", "iottwinmaker:ListComponentTypes", "iotwireless:GetFuotaTask", "iotwireless:GetMulticastGroup", "iotwireless:ListFuotaTasks", "iotwireless:ListMulticastGroups", "kafka:ListScramSecrets", "macie2:ListTagsForResource", "mediaconnect:ListTagsForResource", "networkmanager:GetConnectPeer", "networkmanager:ListConnectPeers", "organizations:DescribeEffectivePolicy", "organizations:DescribeResourcePolicy", "resource-explorer-2:GetIndex", "resource-explorer-2:ListIndexes", "resource-explorer-2:ListTagsForResource", "route53:ListCidrCollections", "s3:GetMultiRegionAccessPointPolicy", "s3:GetMultiRegionAccessPointPolicyStatus", "sns:GetDataProtectionPolicy", "ssm:DescribeParameters", "ssm:GetParameter", and "ssm:ListTagsForResource" |
Esta política ahora admite permisos adicionales para AWS App Mesh Amazon WorkSpaces Applications AWS CloudFormation, Amazon CloudFront AWS CodeArtifact, Amazon Connect Customer AWS CodeBuild AWS Glue, Amazon AWS Identity and Access Management (IAM) GuardDuty, Amazon Inspector,,, AWS IoT AWS IoT TwinMaker AWS IoT Wireless, Amazon Managed Streaming para Apache Kafka, Amazon Macie, AWS Elemental MediaConnect, AWS Network Manager, AWS Organizations AWS Resource Explorer, Amazon Route 53, Amazon Simple Storage Service (Amazon S3), Amazon Simple Notification Service (Amazon SNS) y Amazon EC2 Systems Manager (SSM). |
28 de julio de 2023 |
| AWS_ConfigRole: añadir "amplify:GetBranch", "amplify:ListBranches", "app-integrations:GetEventIntegration", "app-integrations:ListEventIntegrationAssociations", "app-integrations:ListEventIntegrations", "appmesh:DescribeRoute", "appmesh:ListRoutes", "aps:ListRuleGroupsNamespaces", "athena:GetPreparedStatement", "athena:ListPreparedStatements", "batch:DescribeSchedulingPolicies", "batch:ListSchedulingPolicies", "cloudformation:ListTypes", "cloudtrail:ListTrails", "codeartifact:ListDomains", "codeguru-profiler:DescribeProfilingGroup", "codeguru-profiler:GetNotificationConfiguration", "codeguru-profiler:GetPolicy", "codeguru-profiler:ListProfilingGroups", "ds:DescribeDomainControllers", “dynamodb:DescribeTableReplicaAutoScaling" "dynamodb:DescribeTimeToLive", "ec2:DescribeTrafficMirrorFilters", "evidently:GetLaunch", "evidently:ListLaunches", "forecast:DescribeDatasetGroup", "forecast:ListDatasetGroups", "greengrass:DescribeComponent", "greengrass:GetComponent", "greengrass:ListComponents", "greengrass:ListComponentVersions", "groundstation:GetMissionProfile", "groundstation:ListMissionProfiles", "iam:ListGroups", "iam:ListRoles", "kafka:DescribeConfiguration", "kafka:DescribeConfigurationRevision", "kafka:ListConfigurations", "lightsail:GetRelationalDatabases" "logs:ListTagsLogGroup", "mediaconnect:DescribeFlow", "mediaconnect:ListFlows", "mediatailor:GetPlaybackConfiguration", "mediatailor:ListPlaybackConfigurations", "mobiletargeting:GetApplicationSettings", "mobiletargeting:GetEmailTemplate", "mobiletargeting:GetEventStream", "mobiletargeting:ListTemplates", "networkmanager:GetCustomerGatewayAssociations", "networkmanager:GetLinkAssociations", "organizations:DescribeAccount", "organizations:DescribeOrganizationalUnit", "organizations:ListAccounts", "organizations:ListAccountsForParent", "organizations:ListOrganizationalUnitsForParent", "organizations:ListTagsForResource", "personalize:DescribeDataset", "personalize:DescribeDatasetGroup", "personalize:DescribeSchema", "personalize:DescribeSolution", "personalize:ListDatasetGroups", "personalize:ListDatasetImportJobs", "personalize:ListDatasets", "personalize:ListSchemas", "personalize:ListSolutions", "personalize:ListTagsForResource", "quicksight:ListTemplates", "refactor-spaces:GetEnvironment", "refactor-spaces:GetService", "refactor-spaces:ListApplications", "refactor-spaces:ListEnvironments", "refactor-spaces:ListServices", "s3:GetAccessPointPolicyStatusForObjectLambda", "sagemaker:DescribeDeviceFleet", "sagemaker:DescribeFeatureGroup", "sagemaker:ListDeviceFleets", "sagemaker:ListFeatureGroups", "sagemaker:ListModels", and "transfer:ListTagsForResource" |
Esta política ahora admite permisos adicionales para AWS Amplify Amazon Connect Customer AWS App Mesh, Amazon Managed Service for Prometheus, Amazon Athena AWS Batch, AWS CloudFormation, AWS CloudTrail, AWS CodeArtifact CodeGuru, Amazon DynamoDB AWS Directory Service, Amazon Elastic Compute Cloud (Amazon EC2), Amazon CloudWatch Evidentemente AWS Organizations, Amazon Forecast AWS IoT Greengrass, AWS Ground Station, AWS Identity and Access Management (IAM), Amazon Managed Streaming para Apache Kafka (Amazon MSK), Amazon Lightsail, Amazon CloudWatch Logs AWS Elemental MediaConnect AWS Elemental MediaTailor, Amazon Pinpoint, Amazon Virtual Private Cloud ( Amazon VPC), Amazon Personalize, Amazon Quick AWS Migration Hub Refactor Spaces, Amazon Simple Storage Service (Amazon S3), Amazon SageMaker AI, AWS Transfer Family. |
13 de junio de 2023 |
| AWSConfigServiceRolePolicy: añadir "amplify:GetBranch", "amplify:ListBranches", "app-integrations:GetEventIntegration", "app-integrations:ListEventIntegrationAssociations", "app-integrations:ListEventIntegrations", "appmesh:DescribeRoute", "appmesh:ListRoutes", "aps:ListRuleGroupsNamespaces", "athena:GetPreparedStatement", "athena:ListPreparedStatements", "batch:DescribeSchedulingPolicies", "batch:ListSchedulingPolicies", "cloudformation:ListTypes", "cloudtrail:ListTrails", "codeartifact:ListDomains", "codeguru-profiler:DescribeProfilingGroup", "codeguru-profiler:GetNotificationConfiguration", "codeguru-profiler:GetPolicy", "codeguru-profiler:ListProfilingGroups", "ds:DescribeDomainControllers", "dynamodb:DescribeTableReplicaAutoScaling", "dynamodb:DescribeTimeToLive", "ec2:DescribeTrafficMirrorFilters", "evidently:GetLaunch", "evidently:ListLaunches", "forecast:DescribeDatasetGroup", "forecast:ListDatasetGroups", "greengrass:DescribeComponent", "greengrass:GetComponent", "greengrass:ListComponents", "greengrass:ListComponentVersions", "groundstation:GetMissionProfile", "groundstation:ListMissionProfiles", "iam:ListGroups", "iam:ListRoles", "kafka:DescribeConfiguration", "kafka:DescribeConfigurationRevision", "kafka:ListConfigurations", "lightsail:GetRelationalDatabases", "logs:ListTagsLogGroup", "mediaconnect:DescribeFlow", "mediaconnect:ListFlows", "mediatailor:GetPlaybackConfiguration", "mediatailor:ListPlaybackConfigurations", "mobiletargeting:GetApplicationSettings", "mobiletargeting:GetEmailTemplate", "mobiletargeting:GetEventStream", "mobiletargeting:ListTemplates", "networkmanager:GetCustomerGatewayAssociations", "networkmanager:GetLinkAssociations", "organizations:DescribeAccount", "organizations:DescribeOrganizationalUnit", "organizations:ListAccounts", "organizations:ListAccountsForParent", "organizations:ListOrganizationalUnitsForParent", "organizations:ListTagsForResource", "personalize:DescribeDataset", "personalize:DescribeDatasetGroup", "personalize:DescribeSchema", "personalize:DescribeSolution", "personalize:ListDatasetGroups", "personalize:ListDatasetImportJobs", "personalize:ListDatasets", "personalize:ListSchemas", "personalize:ListSolutions", "personalize:ListTagsForResource", "quicksight:ListTemplates", "refactor-spaces:GetEnvironment", "refactor-spaces:GetService", "refactor-spaces:ListApplications", "refactor-spaces:ListEnvironments", "refactor-spaces:ListServices", "s3:GetAccessPointPolicyStatusForObjectLambda", "sagemaker:DescribeDeviceFleet", "sagemaker:DescribeFeatureGroup", "sagemaker:ListDeviceFleets", "sagemaker:ListFeatureGroups", "sagemaker:ListModels", and "transfer:ListTagsForResource" |
Esta política ahora admite permisos adicionales para AWS Amplify Amazon Connect Customer AWS App Mesh, Amazon Managed Service for Prometheus, Amazon Athena AWS Batch, AWS CloudFormation, AWS CloudTrail, AWS CodeArtifact CodeGuru, Amazon DynamoDB AWS Directory Service, Amazon Elastic Compute Cloud (Amazon EC2), Amazon CloudWatch Evidentemente AWS Organizations, Amazon Forecast AWS IoT Greengrass, AWS Ground Station, AWS Identity and Access Management (IAM), Amazon Managed Streaming para Apache Kafka (Amazon MSK), Amazon Lightsail, Amazon CloudWatch Logs AWS Elemental MediaConnect AWS Elemental MediaTailor, Amazon Pinpoint, Amazon Virtual Private Cloud ( Amazon VPC), Amazon Personalize, Amazon Quick AWS Migration Hub Refactor Spaces, Amazon Simple Storage Service (Amazon S3), Amazon SageMaker AI, AWS Transfer Family. |
13 de junio de 2023 |
| AWSConfigServiceRolePolicy: añadir amplify:GetApp, amplify:ListApps, appmesh:DescribeVirtualGateway, appmesh:DescribeVirtualNode, appmesh:DescribeVirtualRouter, appmesh:DescribeVirtualService, appmesh:ListMeshes, appmesh:ListTagsForResource, appmesh:ListVirtualGateways, appmesh:ListVirtualNodes, appmesh:ListVirtualRouters, appmesh:ListVirtualServices, apprunner:DescribeVpcConnector, apprunner:ListVpcConnectors, cloudformation:ListTypes, cloudfront:ListResponseHeadersPolicies, codeartifact:ListRepositories, ds:DescribeEventTopics, ds:ListLogSubscriptions, GetInstanceTypesFromInstanceRequirement ec2:GetManagedPrefixListEntries, kendra:DescribeIndex, kendra:ListIndices, kendra:ListTagsForResource, logs:DescribeDestinations, logs:GetDataProtectionPolicy, macie2:DescribeOrganizationConfiguration, macie2:GetAutomatedDiscoveryConfiguration, macie2:GetClassificationExportConfiguration, macie2:GetCustomDataIdentifier, macie2:GetFindingsPublicationConfiguration, macie2:ListCustomDataIdentifiers, mobiletargeting:GetEmailChannel, refactor-spaces:GetEnvironment, refactor-spaces:ListEnvironments, resiliencehub:ListTagsForResource, route53:GetDNSSEC, sagemaker:DescribeDomain, sagemaker:DescribeModelBiasJobDefinition, sagemaker:DescribeModelQualityJobDefinition, sagemaker:DescribePipeline, sagemaker:DescribeProject, sagemaker:ListDomains, sagemaker:ListModelBiasJobDefinitions, sagemaker:ListModelQualityJobDefinitions, sagemaker:ListPipelines, sagemaker:ListProjects, transfer:DescribeAgreement, transfer:DescribeCertificate, transfer:ListAgreements, transfer:ListCertificates, and waf-regional:ListLoggingConfigurations |
Esta política ahora admite permisos adicionales para Amazon Managed Workflows para Amazon AWS Amplify AWS App Mesh AWS App Runner CloudFront, AWS CodeArtifact Amazon Elastic Compute Cloud, Amazon Kendra, Amazon Macie, Amazon Route 53, Amazon SageMaker AI, Amazon Pinpoint AWS Transfer Family, AWS Resilience Hub AWS Migration Hub, Amazon CloudWatch, AWS Directory Service y. AWS WAF |
13 de abril de 2023 |
| AWS_ConfigRole: añadir amplify:GetApp, amplify:ListApps, appmesh:DescribeVirtualGateway, appmesh:DescribeVirtualNode, appmesh:DescribeVirtualRouter, appmesh:DescribeVirtualService, appmesh:ListMeshes, appmesh:ListTagsForResource, appmesh:ListVirtualGateways, appmesh:ListVirtualNodes, appmesh:ListVirtualRouters, appmesh:ListVirtualServices, apprunner:DescribeVpcConnector, apprunner:ListVpcConnectors, cloudformation:ListTypes, cloudfront:ListResponseHeadersPolicies, codeartifact:ListRepositories, ds:DescribeEventTopics, ds:ListLogSubscriptions, ec2:GetInstanceTypesFromInstanceRequirement, ec2:GetManagedPrefixListEntries, kendra:DescribeIndex, kendra:ListIndices, kendra:ListTagsForResource, logs:DescribeDestinations, logs:GetDataProtectionPolicy, macie2:DescribeOrganizationConfiguration, macie2:GetAutomatedDiscoveryConfiguration, macie2:GetClassificationExportConfiguration, macie2:GetCustomDataIdentifier, macie2:GetFindingsPublicationConfiguration, macie2:ListCustomDataIdentifiers, mobiletargeting:GetEmailChannel, refactor-spaces:GetEnvironment, refactor-spaces:ListEnvironments, resiliencehub:ListTagsForResource, route53:GetDNSSEC, sagemaker:DescribeDomain, sagemaker:DescribeModelBiasJobDefinition, sagemaker:DescribeModelQualityJobDefinition, sagemaker:DescribePipeline, sagemaker:DescribeProject, sagemaker:ListDomains, sagemaker:ListModelBiasJobDefinitions, sagemaker:ListModelQualityJobDefinitions, sagemaker:ListPipelines, sagemaker:ListProjects, transfer:DescribeAgreement, transfer:DescribeCertificate, transfer:ListAgreements, transfer:ListCertificates, and waf-regional:ListLoggingConfigurations |
Esta política ahora admite permisos adicionales para Amazon Managed Workflows for AWS Amplify AWS App Mesh AWS App Runner, CloudFront AWS CodeArtifact, Amazon Elastic Compute Cloud, Amazon Kendra, Amazon Macie, Amazon Route 53, Amazon SageMaker AI AWS Transfer Family, Amazon Pinpoint AWS Migration Hub, AWS Resilience Hub CloudWatch, Amazon, AWS Directory Service y AWS WAF. |
13 de abril de 2023 |
| AWSConfigServiceRolePolicy: añadir appflow:DescribeFlow, appflow:ListFlows, appflow:ListTagsForResource, apprunner:DescribeService, apprunner:ListServices, apprunner:ListTagsForResource, appstream:DescribeApplications, appstream:DescribeFleets, cloudfront:GetResponseHeadersPolicy, cloudwatch:ListTagsForResource, codeartifact:DescribeRepository, codeartifact:GetRepositoryPermissionsPolicy, codeartifact:ListTagsForResource, codecommit:GetRepository, codecommit:GetRepositoryTriggers, codecommit:ListRepositories, codecommit:ListTagsForResource, devicefarm:GetInstanceProfile, devicefarm:ListInstanceProfiles, devicefarm:ListProjects, evidently:GetProject, evidently:ListProjects, evidently:ListTagsForResource, forecast:DescribeDataset, forecast:ListDatasets, forecast:ListTagsForResource, groundstation:GetConfig, groundstation:ListConfigs, groundstation:ListTagsForResource, iam:GetInstanceProfile, iam:GetSAMLProvider, iam:GetServerCertificate, iam:ListAccessKeys, iam:ListGroups, iam:ListInstanceProfiles, iam:ListMFADevices, iam:ListMFADeviceTags, iam:ListRoles, iam:ListSAMLProviders, iot:DescribeFleetMetric, iot:ListFleetMetrics, memorydb:DescribeUsers, memorydb:ListTags, mobiletargeting:GetApp, mobiletargeting:GetCampaigns, networkmanager:GetDevices, networkmanager:GetLinks, networkmanager:GetSites, panorama:ListNodes, rds:DescribeDBProxyEndpoints, redshift:DescribeScheduledActions, sagemaker:DescribeAppImageConfig, sagemaker:DescribeImage, sagemaker:DescribeImageVersion, sagemaker:ListAppImageConfigs, sagemaker:ListImages, and sagemaker:ListImageVersions |
Esta política ahora admite permisos adicionales para Amazon Managed Workflows for Amazon AppFlow AWS App Runner, Amazon WorkSpaces Applications CloudFront CloudWatch, Amazon AWS CodeArtifact, AWS CodeCommit, AWS Device Farm, Amazon CloudWatch Evidentemente, Amazon Forecast AWS Ground Station, AWS Identity and Access Management (IAM) AWS IoT, Amazon MemoryDB, Amazon Pinpoint AWS Network Manager AWS Panorama, Amazon Relational Database Service (Amazon RDS), Amazon Redshift y Amazon SageMaker AI. |
30 de marzo de 2023 |
| AWS_ConfigRole: añadir appflow:DescribeFlow, appflow:ListFlows, appflow:ListTagsForResource, apprunner:DescribeService, apprunner:ListServices, apprunner:ListTagsForResource, appstream:DescribeApplications, appstream:DescribeFleets, cloudformation:ListTypes, cloudfront:GetResponseHeadersPolicy, cloudfront:ListDistributions, cloudwatch:ListTagsForResource, codeartifact:DescribeRepository, codeartifact:GetRepositoryPermissionsPolicy, codeartifact:ListTagsForResource, codecommit:GetRepository, codecommit:GetRepositoryTriggers, codecommit:ListRepositories, codecommit:ListTagsForResource, devicefarm:GetInstanceProfile, devicefarm:ListInstanceProfiles, devicefarm:ListProjects, ec2:DescribeTrafficMirrorFilters, evidently:GetProject, evidently:ListProjects, evidently:ListTagsForResource, forecast:DescribeDataset, forecast:ListDatasets, forecast:ListTagsForResource, groundstation:GetConfig, groundstation:ListConfigs, groundstation:ListTagsForResource, iam:GetInstanceProfile, iam:GetSAMLProvider, iam:GetServerCertificate, iam:ListAccessKeys, iam:ListGroups, iam:ListInstanceProfiles, iam:ListMFADevices, iam:ListMFADeviceTags, iam:ListRoles, iam:ListSAMLProviders, iot:DescribeFleetMetric, iot:ListFleetMetrics, memorydb:DescribeUsers, memorydb:ListTags, mobiletargeting:GetApp, mobiletargeting:GetCampaigns, networkmanager:GetDevices, networkmanager:GetLinks, networkmanager:GetSites, panorama:ListNodes, rds:DescribeDBProxyEndpoints, redshift:DescribeScheduledActions, sagemaker:DescribeAppImageConfig, sagemaker:DescribeImage, sagemaker:DescribeImageVersion, sagemaker:ListAppImageConfigs, sagemaker:ListImages, and sagemaker:ListImageVersions |
Esta política ahora admite permisos adicionales para Amazon Managed Workflows for Amazon AppFlow AWS App Runner, Amazon WorkSpaces Applications AWS CloudFormation CloudFront, Amazon CloudWatch, AWS CodeArtifact, AWS CodeCommit, AWS Device Farm, Amazon Elastic Compute Cloud (Amazon EC2), Amazon CloudWatch Evidently AWS Ground Station, Amazon Forecast AWS Identity and Access Management (IAM) AWS IoT, Amazon MemoryDB, Amazon Pinpoint AWS Network Manager AWS Panorama, Amazon Relational Database Service (Amazon RDS), Amazon Redshift y Amazon SageMaker AI. |
30 de marzo de 2023 |
|
AWSConfigRulesExecutionRole— comienza a realizar un seguimiento de los cambios en esta AWS Config política gestionada AWS |
Esta política permite a AWS Lambda las funciones acceder a la AWS Config API y a las instantáneas de configuración que se AWS Config entregan periódicamente a Amazon S3. Las funciones que evalúan los cambios de configuración para las reglas Lambda AWS personalizadas requieren este acceso. |
7 de marzo de 2023 |
|
AWSConfigRoleForOrganizations— AWS Config comienza a realizar el seguimiento de los cambios en esta política AWS gestionada |
Esta política permite llamar AWS Config a las API de solo lectura AWS Organizations . |
7 de marzo de 2023 |
|
AWSConfigRemediationServiceRolePolicy— AWS Config comienza a realizar un seguimiento de los cambios en esta política gestionada AWS |
Esta política permite AWS Config corregir |
7 de marzo de 2023 |
|
AWSConfigServiceRolePolicy: añadir auditmanager:GetAccountStatus |
Esta política ahora permite devolver el estado de registro de una cuenta en AWS Audit Manager. |
3 de marzo de 2023 |
|
AWS_ConfigRole: añadir auditmanager:GetAccountStatus |
Esta política ahora permite devolver el estado de registro de una cuenta en AWS Audit Manager. |
3 de marzo de 2023 |
|
AWSConfigMultiAccountSetupPolicy— AWS Config comienza a realizar un seguimiento de los cambios en esta política AWS gestionada |
Esta política permite llamar AWS Config a AWS los servicios e implementar AWS Config recursos en una organización con AWS Organizations. |
27 de febrero de 2023 |
|
AWSConfigServiceRolePolicy: añadir airflow:ListTagsForResource, iot:ListCustomMetrics, iot:DescribeCustomMetric, appstream:DescribeDirectoryConfigs, appstream:ListTagsForResource, codeguru-reviewer:DescribeRepositoryAssociation, codeguru-reviewer:ListRepositoryAssociations, healthlake:ListFHIRDatastores, healthlake:DescribeFHIRDatastore, healthlake:ListTagsForResource, kinesisvideo:DescribeStream, kinesisvideo:ListStreams, kinesisvideo:ListTagsForStream, kinesisvideo:DescribeSignalingChannel, kinesisvideo:ListTagsForResource, kinesisvideo:ListSignalingChannels, route53-recovery-control-config:DescribeCluster, route53-recovery-control-config:DescribeRoutingControl, route53-recovery-control-config:DescribeSafetyRule, route53-recovery-control-config:ListClusters, route53-recovery-control-config:ListRoutingControls, route53-recovery-control-config:ListSafetyRules, devicefarm:GetTestGridProject, devicefarm:ListTestGridProjects, ec2:DescribeCapacityReservationFleets, ec2:DescribeIpamPools, ec2:DescribeIpams, ec2:GetInstanceTypesFromInstanceRequirement, mobiletargeting:GetApplicationSettings, mobiletargeting:ListTagsForResource, ecr:BatchGetRepositoryScanningConfiguration, iam:ListServerCertificates, guardduty:ListPublishingDestinations, guardduty:DescribePublishingDestination, logs:GetLogDelivery, and logs:ListLogDeliveries |
Esta política ahora admite permisos adicionales para Amazon Managed Workflows para Apache Airflow, AWS IoT Amazon WorkSpaces Applications, Amazon CodeGuru Reviewer AWS HealthLake, Amazon Kinesis Video Streams, Amazon Application Recovery Controller (ARC) AWS Device Farm, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Pinpoint AWS Identity and Access Management (IAM), Amazon y Amazon GuardDuty Logs. CloudWatch |
1 de febrero de 2023 |
|
AWS_ConfigRole: añadir airflow:ListTagsForResource, iot:ListCustomMetrics, iot:DescribeCustomMetric, appstream:DescribeDirectoryConfigs, appstream:ListTagsForResource, codeguru-reviewer:DescribeRepositoryAssociation, codeguru-reviewer:ListRepositoryAssociations, healthlake:ListFHIRDatastores, healthlake:DescribeFHIRDatastore, healthlake:ListTagsForResource, kinesisvideo:DescribeStream, kinesisvideo:ListStreams, kinesisvideo:ListTagsForStream, kinesisvideo:DescribeSignalingChannel, kinesisvideo:ListTagsForResource, kinesisvideo:ListSignalingChannels, route53-recovery-control-config:DescribeCluster, route53-recovery-control-config:DescribeRoutingControl, route53-recovery-control-config:DescribeSafetyRule, route53-recovery-control-config:ListClusters, route53-recovery-control-config:ListRoutingControls, route53-recovery-control-config:ListSafetyRules, devicefarm:GetTestGridProject, devicefarm:ListTestGridProjects, ec2:DescribeCapacityReservationFleets, ec2:DescribeIpamPools, ec2:DescribeIpams, ec2:GetInstanceTypesFromInstanceRequirement, mobiletargeting:GetApplicationSettings, mobiletargeting:ListTagsForResource, ecr:BatchGetRepositoryScanningConfiguration, iam:ListServerCertificates, guardduty:ListPublishingDestinations, guardduty:DescribePublishingDestination, logs:GetLogDelivery, and logs:ListLogDeliveries |
Esta política ahora admite permisos adicionales para Amazon Managed Workflows para Apache Airflow AWS IoT, Amazon WorkSpaces Applications, Amazon CodeGuru Reviewer AWS HealthLake, Amazon Kinesis Video Streams, Amazon Application Recovery Controller (ARC) AWS Device Farm, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Pinpoint AWS Identity and Access Management (IAM) GuardDuty, Amazon y Amazon CloudWatch Logs. |
1 de febrero de 2023 |
|
ConfigConformsServiceRolePolicy: actualizar config:DescribeConfigRules |
Como práctica recomendada de seguridad, ahora esta política elimina el permiso amplio en el nivel de los recursos para |
12 de enero de 2023 |
|
AWSConfigServiceRolePolicy: añadir APS:DescribeRuleGroupsNamespace, APS:DescribeWorkspace, APS:ListWorkspaces, auditmanager:GetAssessment, auditmanager:ListAssessments, devicefarm:GetNetworkProfile, AWS Transfer Family devicefarm:GetProject, devicefarm:ListNetworkProfiles, devicefarm:ListTagsForResource, dms:DescribeEndpoints, ds:ListTagsForResource, ec2:DescribeTags, ec2:DescribeTrafficMirrorSessions, ec2:DescribeTrafficMirrorTargets, ec2:GetIpamPoolAllocations, ec2:GetIpamPoolCidrs, glue:GetMLTransform, glue:GetMLTransforms, glue:ListMLTransforms, iot:DescribeScheduledAudit, iot:ListScheduledAudits, ivs:GetChannel, lightsail:GetRelationalDatabases, mediapackage-vod:DescribePackagingConfiguration, mediapackage-vod:ListPackagingConfigurations, networkmanager:DescribeGlobalNetworks, networkmanager:GetTransitGatewayRegistrations, networkmanager:ListTagsForResource, quicksight:DescribeDashboard, quicksight:DescribeDashboardPermissions, quicksight:DescribeTemplate, quicksight:DescribeTemplatePermissions, quicksight:ListDashboards, quicksight:ListTemplates, ram:ListResources, route53-recovery-control-config:DescribeControlPanel, route53-recovery-control-config:ListControlPanels, route53-recovery-control-config:ListTagsForResource, route53resolver:GetResolverQueryLogConfigAssociation, route53resolver:ListResolverQueryLogConfigAssociations, s3:GetAccessPointForObjectLambda, s3:GetAccessPointPolicyForObjectLambda, s3:GetAccessPointPolicyStatusForObjectLambda, s3:GetMultiRegionAccessPoint, s3:ListAccessPointsForObjectLambda, s3:ListMultiRegionAccessPoints, timestream:DescribeEndpoints, transfer:DescribeConnector, transfer:ListConnectors, and transfer:ListTagsForResource |
Esta política ahora admite permisos adicionales para Amazon Managed Service for Prometheus AWS Audit Manager, AWS Device Farm,, AWS Database Migration Service (AWS DMS) AWS Directory Service, Amazon Elastic Compute Cloud (Amazon EC2) AWS Glue AWS IoT, Amazon Lightsail,, AWS Elemental MediaPackage, Amazon Quick AWS Network Manager AWS Resource Access Manager, Amazon Application Recovery Controller (ARC), Amazon Simple Storage Service (Amazon S3) y Amazon Timestream. |
15 de diciembre de 2022 |
|
AWS_ConfigRole: añadir APS:DescribeRuleGroupsNamespace, APS:DescribeWorkspace, APS:ListWorkspaces, auditmanager:GetAssessment, auditmanager:ListAssessments, devicefarm:GetNetworkProfile, devicefarm:GetProject, devicefarm:ListNetworkProfiles, devicefarm:ListTagsForResource, dms:DescribeEndpoints, ds:ListTagsForResource, ec2:DescribeTags, ec2:DescribeTrafficMirrorSessions, ec2:DescribeTrafficMirrorTargets, ec2:GetIpamPoolAllocations, ec2:GetIpamPoolCidrs, glue:GetMLTransform, glue:GetMLTransforms, glue:ListMLTransforms, iot:DescribeScheduledAudit, iot:ListScheduledAudits, ivs:GetChannel, lightsail:GetRelationalDatabases, mediapackage-vod:DescribePackagingConfiguration, mediapackage-vod:ListPackagingConfigurations, networkmanager:DescribeGlobalNetworks, networkmanager:GetTransitGatewayRegistrations, networkmanager:ListTagsForResource, quicksight:DescribeDashboard, quicksight:DescribeDashboardPermissions, quicksight:DescribeTemplate, quicksight:DescribeTemplatePermissions, quicksight:ListDashboards, quicksight:ListTemplates, ram:ListResources, route53-recovery-control-config:DescribeControlPanel, route53-recovery-control-config:ListControlPanels, route53-recovery-control-config:ListTagsForResource, route53resolver:GetResolverQueryLogConfigAssociation, route53resolver:ListResolverQueryLogConfigAssociations, s3:GetAccessPointForObjectLambda, s3:GetAccessPointPolicyForObjectLambda, s3:GetAccessPointPolicyStatusForObjectLambda, s3:GetMultiRegionAccessPoint, s3:ListAccessPointsForObjectLambda, s3:ListMultiRegionAccessPoints, timestream:DescribeEndpoints, transfer:DescribeConnector, transfer:ListConnectors, and transfer:ListTagsForResource |
Esta política ahora admite permisos adicionales para Amazon Managed Service for Prometheus AWS Audit Manager, AWS Device Farm,, AWS Database Migration Service (AWS DMS) AWS Directory Service, Amazon Elastic Compute Cloud (Amazon EC2) AWS Glue AWS IoT, Amazon Lightsail,, AWS Elemental MediaPackage, Amazon Quick AWS Network Manager AWS Resource Access Manager, Amazon Application Recovery Controller (ARC), Amazon Simple Storage Service (Amazon S3) y Amazon Timestream. |
15 de diciembre de 2022 |
|
AWSConfigServiceRolePolicy: añadir cloudformation:ListStackResources and cloudformation:ListStacks |
Esta política ahora otorga permiso para devolver descripciones de todos los recursos de una AWS CloudFormation pila específica y devolver la información resumida de las pilas cuyo estado coincide con el especificadoStackStatusFilter. |
7 de noviembre de 2022 |
|
AWS_ConfigRole: añadir cloudformation:ListStackResources and cloudformation:ListStacks |
Esta política ahora otorga permiso para devolver descripciones de todos los recursos de una AWS CloudFormation pila específica y devolver la información resumida de las pilas cuyo estado coincide con el especificado. StackStatusFilter |
7 de noviembre de 2022 |
|
AWSConfigServiceRolePolicy: añadir acm-pca:GetCertificateAuthorityCsr, acm-pca:ListCertificateAuthorities, acm-pca:ListTags, airflow:GetEnvironment, airflow:ListEnvironments, amplifyuibuilder:ListThemes, appconfig:ListConfigurationProfiles, appconfig:ListDeployments, appconfig:ListDeploymentStrategies, appconfig:ListEnvironments, appconfig:ListHostedConfigurationVersions, cassandra:Select, cloudwatch:DescribeAnomalyDetectors, cloudwatch:GetDashboard, cloudwatch:ListDashboards, connect:DescribePhoneNumber, connect:ListPhoneNumbers, connect:ListPhoneNumbersV2, connect:SearchAvailablePhoneNumbers, databrew:DescribeDataset, databrew:DescribeJob, databrew:DescribeProject, databrew:DescribeRecipe, databrew:DescribeRuleset, databrew:DescribeSchedule, databrew:ListDatasets, databrew:ListJobs, databrew:ListProjects, databrew:ListRecipes, databrew:ListRecipeVersions, databrew:ListRulesets, databrew:ListSchedules, ec2:DescribeRouteTables, eks:DescribeAddon, eks:DescribeIdentityProviderConfig, eks:ListAddons, eks:ListIdentityProviderConfigs, events:DescribeConnection, events:ListApiDestinations, events:ListConnections, fis:GetExperimentTemplate, fis:ListExperimentTemplates, frauddetector:GetRules, fsx:DescribeBackups, fsx:DescribeSnapshots, fsx:DescribeStorageVirtualMachines, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeVpcPeeringConnections, geo:ListGeofenceCollections, geo:ListPlaceIndexes, geo:ListRouteCalculators, geo:ListTrackers, iot:DescribeAccountAuditConfiguration, iot:DescribeAuthorizer, iot:DescribeDomainConfiguration, iot:DescribeMitigationAction, iot:ListAuthorizers, iot:ListDomainConfigurations, iot:ListMitigationActions, iotsitewise:DescribeAssetModel, iotsitewise:DescribeDashboard, iotsitewise:DescribeGateway, iotsitewise:DescribePortal, iotsitewise:DescribeProject, iotsitewise:ListAssetModels, iotsitewise:ListDashboards, iotsitewise:ListGateways, iotsitewise:ListPortals, iotsitewise:ListProjectAssets, iotsitewise:ListProjects, iotsitewise:ListTagsForResource, iotwireless:GetServiceProfile, iotwireless:GetWirelessDevice, iotwireless:GetWirelessGatewayTaskDefinition, iotwireless:ListServiceProfiles, iotwireless:ListTagsForResource, iotwireless:ListWirelessDevices, iotwireless:ListWirelessGatewayTaskDefinitions, lex:DescribeBotVersion, lex:ListBotVersions, lightsail:GetContainerServices, lightsail:GetDistributions, lightsail:GetRelationalDatabase, lightsail:GetRelationalDatabaseParameters, mobiletargeting:GetApps, mobiletargeting:GetCampaign, mobiletargeting:GetSegment, mobiletargeting:GetSegments, opsworks:DescribeInstances, opsworks:DescribeTimeBasedAutoScaling, opsworks:DescribeVolumes, panorama:DescribeApplicationInstance, panorama:DescribeApplicationInstanceDetails, panorama:DescribePackage, panorama:DescribePackageVersion, panorama:ListApplicationInstances, panorama:ListPackages, quicksight:ListDataSources, ram:ListResourceSharePermissions, rds:DescribeDBProxies, rds:DescribeGlobalClusters, rekognition:ListStreamProcessors, resource-groups:GetGroup, resource-groups:GetGroupConfiguration, resource-groups:GetGroupQuery, resource-groups:GetTags, resource-groups:ListGroupResources, resource-groups:ListGroups, robomaker:ListRobotApplications, robomaker:ListSimulationApplications, route53resolver:GetResolverDnssecConfig, route53resolver:ListResolverDnssecConfigs, s3:ListStorageLensConfigurations, schemas:GetResourcePolicy, servicediscovery:ListInstances, sts:GetCallerIdentity, synthetics:GetGroup, synthetics:ListAssociatedGroups, synthetics:ListGroupResources, and synthetics:ListGroups |
Esta política ahora admite permisos adicionales para AWS Certificate Manager Amazon Managed Workflows para Apache Airflow, Amazon Keyspaces, Amazon AWS Amplify AWS AppConfig, Connect Customer CloudWatch, Amazon Elastic Compute Cloud (Amazon EC2) AWS Glue DataBrew, Amazon Elastic Kubernetes Service (Amazon EKS), Amazon Fraud Detector, Amazon FSx, Amazon GameLift Servers, Amazon Location Service EventBridge AWS Fault Injection Service, Amazon Lex, Amazon Lightsail, Amazon Pinpoint, Amazon Quick, Amazon Relational Database Service (Amazon Rational Database Service (Amazon Rational Database Service) (Amazon Rational Database Service (Amazon Rational Database Service) DS), AWS IoT OpsWorks AWS Panorama AWS Resource Access Manager Amazon Rekognition AWS RoboMaker Grupos de recursos de AWS, Amazon Route 53, Amazon Simple Storage Service (Amazon S3) y AWS Security Token Service. AWS Cloud Map |
19 de octubre de 2022 |
|
AWS_ConfigRole: añadir acm-pca:GetCertificateAuthorityCsr, acm-pca:ListCertificateAuthorities, acm-pca:ListTags, airflow:GetEnvironment, airflow:ListEnvironments, amplifyuibuilder:ListThemes, appconfig:ListConfigurationProfiles, appconfig:ListDeployments, appconfig:ListDeploymentStrategies, appconfig:ListEnvironments, appconfig:ListHostedConfigurationVersions, cassandra:Select, cloudwatch:DescribeAnomalyDetectors, cloudwatch:GetDashboard, cloudwatch:ListDashboards, connect:DescribePhoneNumber, connect:ListPhoneNumbers, connect:ListPhoneNumbersV2, connect:SearchAvailablePhoneNumbers, databrew:DescribeDataset, databrew:DescribeJob, databrew:DescribeProject, databrew:DescribeRecipe, databrew:DescribeRuleset, databrew:DescribeSchedule, databrew:ListDatasets, databrew:ListJobs, databrew:ListProjects, databrew:ListRecipes, databrew:ListRecipeVersions, databrew:ListRulesets, databrew:ListSchedules, ec2:DescribeRouteTables, eks:DescribeAddon, eks:DescribeIdentityProviderConfig, eks:ListAddons, eks:ListIdentityProviderConfigs, events:DescribeConnection, events:ListApiDestinations, events:ListConnections, fis:GetExperimentTemplate, fis:ListExperimentTemplates, frauddetector:GetRules, fsx:DescribeBackups, fsx:DescribeSnapshots, fsx:DescribeStorageVirtualMachines, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeVpcPeeringConnections, geo:ListGeofenceCollections, geo:ListPlaceIndexes, geo:ListRouteCalculators, geo:ListTrackers, iot:DescribeAccountAuditConfiguration, iot:DescribeAuthorizer, iot:DescribeDomainConfiguration, iot:DescribeMitigationAction, iot:ListAuthorizers, iot:ListDomainConfigurations, iot:ListMitigationActions, iotsitewise:DescribeAssetModel, iotsitewise:DescribeDashboard, iotsitewise:DescribeGateway, iotsitewise:DescribePortal, iotsitewise:DescribeProject, iotsitewise:ListAssetModels, iotsitewise:ListDashboards, iotsitewise:ListGateways, iotsitewise:ListPortals, iotsitewise:ListProjectAssets, iotsitewise:ListProjects, iotsitewise:ListTagsForResource, iotwireless:GetServiceProfile, iotwireless:GetWirelessDevice, iotwireless:GetWirelessGatewayTaskDefinition, iotwireless:ListServiceProfiles, iotwireless:ListTagsForResource, iotwireless:ListWirelessDevices, iotwireless:ListWirelessGatewayTaskDefinitions, lex:DescribeBotVersion, lex:ListBotVersions, lightsail:GetContainerServices, lightsail:GetDistributions, lightsail:GetRelationalDatabase, lightsail:GetRelationalDatabaseParameters, mobiletargeting:GetApps, mobiletargeting:GetCampaign, mobiletargeting:GetSegment, mobiletargeting:GetSegments, opsworks:DescribeInstances, opsworks:DescribeTimeBasedAutoScaling, opsworks:DescribeVolumes, panorama:DescribeApplicationInstance, panorama:DescribeApplicationInstanceDetails, panorama:DescribePackage, panorama:DescribePackageVersion, panorama:ListApplicationInstances, panorama:ListPackages, quicksight:ListDataSources, ram:ListResourceSharePermissions, rds:DescribeDBProxies, rds:DescribeGlobalClusters, rekognition:ListStreamProcessors, resource-groups:GetGroup, resource-groups:GetGroupConfiguration, resource-groups:GetGroupQuery, resource-groups:GetTags, resource-groups:ListGroupResources, resource-groups:ListGroups, robomaker:ListRobotApplications, robomaker:ListSimulationApplications, route53resolver:GetResolverDnssecConfig, route53resolver:ListResolverDnssecConfigs, s3:ListStorageLensConfigurations, schemas:GetResourcePolicy, servicediscovery:ListInstances, sts:GetCallerIdentity, synthetics:GetGroup, synthetics:ListAssociatedGroups, synthetics:ListGroupResources, and synthetics:ListGroups |
Esta política ahora admite permisos adicionales para AWS Certificate Manager Amazon Managed Workflows para Apache Airflow, Amazon Keyspaces, Amazon AWS Amplify AWS AppConfig, Connect Customer CloudWatch, Amazon Elastic Compute Cloud (Amazon EC2) AWS Glue DataBrew, Amazon Elastic Kubernetes Service (Amazon EKS), Amazon Fraud Detector, Amazon FSx, Amazon GameLift Servers, Amazon Location Service EventBridge AWS Fault Injection Service, Amazon Lex, Amazon Lightsail, Amazon Pinpoint, Amazon Quick, Amazon Relational Database Service (Amazon Rational Database Service (Amazon Rational Database Service) (Amazon Rational Database Service (Amazon Rational Database Service) DS), AWS IoT OpsWorks AWS Panorama AWS Resource Access Manager Amazon Rekognition AWS RoboMaker Grupos de recursos de AWS, Amazon Route 53, Amazon Simple Storage Service (Amazon S3) y AWS Security Token Service. AWS Cloud Map |
19 de octubre de 2022 |
|
AWSConfigServiceRolePolicy: añadir Glue::GetTable |
Esta política ahora otorga permiso para recuperar la definición de la AWS Glue tabla en un catálogo de datos para una tabla específica. |
14 de septiembre de 2022 |
|
AWS_ConfigRole: añadir Glue::GetTable |
Esta política ahora otorga permiso para recuperar la definición de la AWS Glue tabla en un catálogo de datos para una tabla específica. |
14 de septiembre de 2022 |
|
AWSConfigServiceRolePolicy: añadir appconfig:ListApplications, appflow:DescribeConnectorProfiles, appsync:GetApiCache, autoscaling-plans:DescribeScalingPlanResources, autoscaling-plans:DescribeScalingPlans, autoscaling-plans:GetScalingPlanResourceForecastData, autoscaling:DescribeWarmPool, backup:DescribeFramework, backup:DescribeReportPlan, backup:ListFrameworks, backup:ListReportPlans, budgets:DescribeBudgetAction, budgets:DescribeBudgetActionsForAccount, budgets:DescribeBudgetActionsForBudget, budgets:ViewBudget, ce:GetAnomalyMonitors, ce:GetAnomalySubscriptions, cloud9:DescribeEnvironmentMemberships, cloud9:DescribeEnvironments, cloud9:ListEnvironments, cloud9:ListTagsForResource, cloudwatch:GetMetricStream, cloudwatch:ListMetricStreams, datasync:DescribeLocationFsxWindows, devops-guru:GetResourceCollection, ds:DescribeDirectories, ec2:DescribeTrafficMirrorFilters, ec2:DescribeTrafficMirrorTargets, ec2:GetNetworkInsightsAccessScopeAnalysisFindings, ec2:GetNetworkInsightsAccessScopeContent, elasticmapreduce:DescribeStudio, elasticmapreduce:GetStudioSessionMapping, elasticmapreduce:ListStudios, elasticmapreduce:ListStudioSessionMappings, events:DescribeEndpoint, events:DescribeEventBus, events:DescribeRule, events:ListArchives, events:ListEndpoints, events:ListEventBuses, events:ListRules, events:ListTagsForResource, events:ListTargetsByRule, finspace:GetEnvironment, finspace:ListEnvironments, frauddetector:GetDetectors, frauddetector:GetDetectorVersion, frauddetector:GetEntityTypes, frauddetector:GetEventTypes, frauddetector:GetExternalModels, frauddetector:GetLabels, frauddetector:GetModels, frauddetector:GetOutcomes, frauddetector:GetVariables, frauddetector:ListTagsForResource, gamelift:DescribeAlias, gamelift:DescribeBuild, gamelift:DescribeFleetAttributes, gamelift:DescribeFleetCapacity, gamelift:DescribeFleetLocationAttributes, gamelift:DescribeFleetLocationCapacity, gamelift:DescribeFleetPortSettings, gamelift:DescribeGameServerGroup, gamelift:DescribeGameSessionQueues, gamelift:DescribeMatchmakingConfigurations, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeRuntimeConfiguration, gamelift:DescribeScript, gamelift:DescribeVpcPeeringAuthorizations, gamelift:ListAliases, gamelift:ListBuilds, gamelift:ListFleets, gamelift:ListGameServerGroups, gamelift:ListScripts, gamelift:ListTagsForResource, geo:ListMaps, glue:GetClassifier, glue:GetClassifiers, imagebuilder:GetContainerRecipe, imagebuilder:GetImage, imagebuilder:GetImagePipeline, imagebuilder:GetImageRecipe, imagebuilder:ListContainerRecipes, imagebuilder:ListImageBuildVersions, imagebuilder:ListImagePipelines, imagebuilder:ListImageRecipes, imagebuilder:ListImages, iot:DescribeCertificate, iot:DescribeDimension, iot:DescribeRoleAlias, iot:DescribeSecurityProfile, iot:GetPolicy, iot:GetTopicRule, iot:GetTopicRuleDestination, iot:ListCertificates, iot:ListDimensions, iot:ListPolicies, iot:ListRoleAliases, iot:ListSecurityProfiles, iot:ListSecurityProfilesForTarget, iot:ListTagsForResource, iot:ListTargetsForSecurityProfile, iot:ListTopicRuleDestinations, iot:ListTopicRules, iot:ListV2LoggingLevels, iot:ValidateSecurityProfileBehaviors, iotanalytics:DescribeChannel, iotanalytics:DescribeDataset, iotanalytics:DescribeDatastore, iotanalytics:DescribePipeline, iotanalytics:ListChannels, iotanalytics:ListDatasets, iotanalytics:ListDatastores, iotanalytics:ListPipelines, iotanalytics:ListTagsForResource, iotevents:DescribeAlarmModel, iotevents:DescribeDetectorModel, iotevents:DescribeInput, iotevents:ListAlarmModels, iotevents:ListDetectorModels, iotevents:ListInputs, iotevents:ListTagsForResource, iotsitewise:DescribeAccessPolicy, iotsitewise:DescribeAsset, iotsitewise:ListAccessPolicies, iotsitewise:ListAssets, iottwinmaker:GetEntity, iottwinmaker:GetScene, iottwinmaker:GetWorkspace, iottwinmaker:ListEntities, iottwinmaker:ListScenes, iottwinmaker:ListTagsForResource, iottwinmaker:ListWorkspaces, ivs:GetPlaybackKeyPair, ivs:GetRecordingConfiguration, ivs:GetStreamKey, ivs:ListChannels, ivs:ListPlaybackKeyPairs, ivs:ListRecordingConfigurations, ivs:ListStreamKeys, ivs:ListTagsForResource, kinesisanalytics:ListApplications, lakeformation:DescribeResource, lakeformation:GetDataLakeSettings, lakeformation:ListPermissions, lakeformation:ListResources, lex:DescribeBot, lex:DescribeBotAlias, lex:DescribeResourcePolicy, lex:ListBotAliases, lex:ListBotLocales, lex:ListBots, lex:ListTagsForResource, license-manager:GetGrant, license-manager:GetLicense, license-manager:ListDistributedGrants, license-manager:ListLicenses, license-manager:ListReceivedGrants, lightsail:GetAlarms, lightsail:GetBuckets, lightsail:GetCertificates, lightsail:GetDisk, lightsail:GetDisks, lightsail:GetInstance, lightsail:GetInstances, lightsail:GetKeyPair, lightsail:GetLoadBalancer, lightsail:GetLoadBalancers, lightsail:GetLoadBalancerTlsCertificates, lightsail:GetStaticIp, lightsail:GetStaticIps, lookoutequipment:DescribeInferenceScheduler, lookoutequipment:ListTagsForResource, lookoutmetrics:DescribeAlert, lookoutmetrics:DescribeAnomalyDetector, lookoutmetrics:ListAlerts, lookoutmetrics:ListAnomalyDetectors, lookoutmetrics:ListMetricSets, lookoutmetrics:ListTagsForResource, lookoutvision:DescribeProject, lookoutvision:ListProjects, managedblockchain:GetMember, managedblockchain:GetNetwork, managedblockchain:GetNode, managedblockchain:ListInvitations, managedblockchain:ListMembers, managedblockchain:ListNodes, mediapackage-vod:DescribePackagingGroup, mediapackage-vod:ListPackagingGroups, mediapackage-vod:ListTagsForResource, mobiletargeting:GetInAppTemplate, mobiletargeting:ListTemplates, mq:DescribeBroker, mq:ListBrokers, nimble:GetLaunchProfile, nimble:GetLaunchProfileDetails, nimble:GetStreamingImage, nimble:GetStudio, nimble:GetStudioComponent, nimble:ListLaunchProfiles, nimble:ListStreamingImages, nimble:ListStudioComponents, nimble:ListStudios, profile:GetDomain, profile:GetIntegration, profile:GetProfileObjectType, profile:ListDomains, profile:ListIntegrations, profile:ListProfileObjectTypes, profile:ListTagsForResource, quicksight:DescribeAnalysis, quicksight:DescribeAnalysisPermissions, quicksight:DescribeDataSet, quicksight:DescribeDataSetPermissions, quicksight:DescribeTheme, quicksight:DescribeThemePermissions, quicksight:ListAnalyses, quicksight:ListDataSets, quicksight:ListThemes, resiliencehub:DescribeApp, resiliencehub:DescribeAppVersionTemplate, resiliencehub:DescribeResiliencyPolicy, resiliencehub:ListApps, resiliencehub:ListAppVersionResourceMappings, resiliencehub:ListResiliencyPolicies, route53-recovery-readiness:GetCell, route53-recovery-readiness:GetReadinessCheck, route53-recovery-readiness:GetRecoveryGroup, route53-recovery-readiness:GetResourceSet, route53-recovery-readiness:ListCells, route53-recovery-readiness:ListReadinessChecks, route53-recovery-readiness:ListRecoveryGroups, route53-recovery-readiness:ListResourceSets, route53resolver:GetFirewallDomainList, route53resolver:GetFirewallRuleGroup, route53resolver:GetFirewallRuleGroupAssociation, route53resolver:GetResolverQueryLogConfig, route53resolver:ListFirewallDomainLists, route53resolver:ListFirewallDomains, route53resolver:ListFirewallRuleGroupAssociations, route53resolver:ListFirewallRuleGroups, route53resolver:ListFirewallRules, route53resolver:ListResolverQueryLogConfigs, rum:GetAppMonitor, rum:GetAppMonitorData, rum:ListAppMonitors, rum:ListTagsForResource, s3-outposts:GetAccessPoint, s3-outposts:GetAccessPointPolicy, s3-outposts:GetBucket, s3-outposts:GetBucketPolicy, s3-outposts:GetBucketTagging, s3-outposts:GetLifecycleConfiguration, s3-outposts:ListAccessPoints, s3-outposts:ListEndpoints, s3-outposts:ListRegionalBuckets, schemas:DescribeDiscoverer, schemas:DescribeRegistry, schemas:DescribeSchema, schemas:ListDiscoverers, schemas:ListRegistries, schemas:ListSchemas, sdb:GetAttributes, sdb:ListDomains, ses:ListEmailTemplates, ses:ListReceiptFilters, ses:ListReceiptRuleSets, ses:ListTemplates, signer:GetSigningProfile, signer:ListProfilePermissions, signer:ListSigningProfiles, synthetics:DescribeCanaries, synthetics:DescribeCanariesLastRun, synthetics:DescribeRuntimeVersions, synthetics:GetCanary, synthetics:GetCanaryRuns, synthetics:ListTagsForResource, timestream:DescribeDatabase, timestream:DescribeTable, timestream:ListDatabases, timestream:ListTables, timestream:ListTagsForResource, transfer:DescribeServer, transfer:DescribeUser, transfer:DescribeWorkflow, transfer:ListServers, transfer:ListUsers, transfer:ListWorkflows, voiceid:DescribeDomain, and voiceid:ListTagsForResource |
Esta política ahora admite permisos adicionales para Amazon AppFlow, Amazon CloudWatch, Amazon CloudWatch RUM, Amazon CloudWatch Synthetics, Amazon Connect Customer Voice ID, Amazon DevOps Guru, Amazon Elastic Compute Cloud (Amazon EC2), Amazon EC2 Auto Scaling, Amazon EMR, Amazon EventBridge, Amazon EventBridge Fraud Detector Amazon FinSpace, Amazon GameLift Servers, Amazon Interactive Video Service (Amazon IVS), Amazon Managed Service para Apache Flink, EC2 Image Builder, Amazon Lex, Amazon Lighting vela, Amazon Location Service, Amazon Lookout for Equipment, Amazon Lookout for Metrics, Amazon Lookout for Vision, Amazon Managed Blockchain, Amazon MQ, Amazon Nimble StudioAmazon Pinpoint, Amazon Quick Amazon Route 53 Resolver, Amazon Application Recovery Controller (ARC), Amazon Simple Storage Service (Amazon S3), Amazon SimpleDB AWS AppConfig AWS AppSync AWS Auto Scaling AWS Backup, Amazon Simple Email Service (Amazon SES) AWS Budgets AWS Cost Explorer AWS Cloud9 AWS Directory Service AWS DataSync, AWS Elemental MediaPackage, AWS Glue, AWS IoT, AWS IoT Analytics, AWS IoT Events, AWS IoT SiteWise, AWS IoT TwinMaker, AWS Lake Formation, AWS License Manager, AWS Resilience Hub, AWS Signer, y AWS Transfer Family. |
7 de septiembre de 2022 |
|
AWS_ConfigRole: añadir appconfig:ListApplications, appflow:DescribeConnectorProfiles, appsync:GetApiCache, autoscaling-plans:DescribeScalingPlanResources, autoscaling-plans:DescribeScalingPlans, autoscaling-plans:GetScalingPlanResourceForecastData, autoscaling:DescribeWarmPool, backup:DescribeFramework, backup:DescribeReportPlan, backup:ListFrameworks, backup:ListReportPlans, budgets:DescribeBudgetAction, budgets:DescribeBudgetActionsForAccount, budgets:DescribeBudgetActionsForBudget, budgets:ViewBudget, ce:GetAnomalyMonitors, ce:GetAnomalySubscriptions, cloud9:DescribeEnvironmentMemberships, cloud9:DescribeEnvironments, cloud9:ListEnvironments, cloud9:ListTagsForResource, cloudwatch:GetMetricStream, cloudwatch:ListMetricStreams, datasync:DescribeLocationFsxWindows, devops-guru:GetResourceCollection, ds:DescribeDirectories, ec2:DescribeTrafficMirrorTargets, ec2:GetNetworkInsightsAccessScopeAnalysisFindings, ec2:GetNetworkInsightsAccessScopeContent, elasticmapreduce:DescribeStudio, elasticmapreduce:GetStudioSessionMapping, elasticmapreduce:ListStudios, elasticmapreduce:ListStudioSessionMappings, events:DescribeEndpoint, events:DescribeEventBus, events:DescribeRule, events:ListArchives, events:ListEndpoints, events:ListEventBuses, events:ListRules, events:ListTagsForResource, events:ListTargetsByRule, finspace:GetEnvironment, finspace:ListEnvironments, frauddetector:GetDetectors, frauddetector:GetDetectorVersion, frauddetector:GetEntityTypes, frauddetector:GetEventTypes, frauddetector:GetExternalModels, frauddetector:GetLabels, frauddetector:GetModels, frauddetector:GetOutcomes, frauddetector:GetVariables, frauddetector:ListTagsForResource, gamelift:DescribeAlias, gamelift:DescribeBuild, gamelift:DescribeFleetAttributes, gamelift:DescribeFleetCapacity, gamelift:DescribeFleetLocationAttributes, gamelift:DescribeFleetLocationCapacity, gamelift:DescribeFleetPortSettings, gamelift:DescribeGameServerGroup, gamelift:DescribeGameSessionQueues, gamelift:DescribeMatchmakingConfigurations, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeRuntimeConfiguration, gamelift:DescribeScript, gamelift:DescribeVpcPeeringAuthorizations, gamelift:ListAliases, gamelift:ListBuilds, gamelift:ListFleets, gamelift:ListGameServerGroups, gamelift:ListScripts, gamelift:ListTagsForResource, geo:ListMaps, glue:GetClassifier, glue:GetClassifiers, imagebuilder:GetContainerRecipe, imagebuilder:GetImage, imagebuilder:GetImagePipeline, imagebuilder:GetImageRecipe, imagebuilder:ListContainerRecipes, imagebuilder:ListImageBuildVersions, imagebuilder:ListImagePipelines, imagebuilder:ListImageRecipes, imagebuilder:ListImages, iot:DescribeCertificate, iot:DescribeDimension, iot:DescribeRoleAlias, iot:DescribeSecurityProfile, iot:GetPolicy, iot:GetTopicRule, iot:GetTopicRuleDestination, iot:ListCertificates, iot:ListDimensions, iot:ListPolicies, iot:ListRoleAliases, iot:ListSecurityProfiles, iot:ListSecurityProfilesForTarget, iot:ListTagsForResource, iot:ListTargetsForSecurityProfile, iot:ListTopicRuleDestinations, iot:ListTopicRules, iot:ListV2LoggingLevels, iot:ValidateSecurityProfileBehaviors, iotanalytics:DescribeChannel, iotanalytics:DescribeDataset, iotanalytics:DescribeDatastore, iotanalytics:DescribePipeline, iotanalytics:ListChannels, iotanalytics:ListDatasets, iotanalytics:ListDatastores, iotanalytics:ListPipelines, iotanalytics:ListTagsForResource, iotevents:DescribeAlarmModel, iotevents:DescribeDetectorModel, iotevents:DescribeInput, iotevents:ListAlarmModels, iotevents:ListDetectorModels, iotevents:ListInputs, iotevents:ListTagsForResource, iotsitewise:DescribeAccessPolicy, iotsitewise:DescribeAsset, iotsitewise:ListAccessPolicies, iotsitewise:ListAssets, iottwinmaker:GetEntity, iottwinmaker:GetScene, iottwinmaker:GetWorkspace, iottwinmaker:ListEntities, iottwinmaker:ListScenes, iottwinmaker:ListTagsForResource, iottwinmaker:ListWorkspaces, ivs:GetPlaybackKeyPair, ivs:GetRecordingConfiguration, ivs:GetStreamKey, ivs:ListChannels, ivs:ListPlaybackKeyPairs, ivs:ListRecordingConfigurations, ivs:ListStreamKeys, ivs:ListTagsForResource, kinesisanalytics:ListApplications, lakeformation:DescribeResource, lakeformation:GetDataLakeSettings, lakeformation:ListPermissions, lakeformation:ListResources, lex:DescribeBot, lex:DescribeBotAlias, lex:DescribeResourcePolicy, lex:ListBotAliases, lex:ListBotLocales, lex:ListBots, lex:ListTagsForResource, license-manager:GetGrant, license-manager:GetLicense, license-manager:ListDistributedGrants, license-manager:ListLicenses, license-manager:ListReceivedGrants, lightsail:GetAlarms, lightsail:GetBuckets, lightsail:GetCertificates, lightsail:GetDisk, lightsail:GetDisks, lightsail:GetInstance, lightsail:GetInstances, lightsail:GetKeyPair, lightsail:GetLoadBalancer, lightsail:GetLoadBalancers, lightsail:GetLoadBalancerTlsCertificates, lightsail:GetStaticIp, lightsail:GetStaticIps, lookoutequipment:DescribeInferenceScheduler, lookoutequipment:ListTagsForResource, lookoutmetrics:DescribeAlert, lookoutmetrics:DescribeAnomalyDetector, lookoutmetrics:ListAlerts, lookoutmetrics:ListAnomalyDetectors, lookoutmetrics:ListMetricSets, lookoutmetrics:ListTagsForResource, lookoutvision:DescribeProject, lookoutvision:ListProjects, managedblockchain:GetMember, managedblockchain:GetNetwork, managedblockchain:GetNode, managedblockchain:ListInvitations, managedblockchain:ListMembers, managedblockchain:ListNodes, mediapackage-vod:DescribePackagingGroup, mediapackage-vod:ListPackagingGroups, mediapackage-vod:ListTagsForResource, mobiletargeting:GetInAppTemplate, mobiletargeting:ListTemplates, mq:DescribeBroker, mq:ListBrokers, nimble:GetLaunchProfile, nimble:GetLaunchProfileDetails, nimble:GetStreamingImage, nimble:GetStudio, nimble:GetStudioComponent, nimble:ListLaunchProfiles, nimble:ListStreamingImages, nimble:ListStudioComponents, nimble:ListStudios, profile:GetDomain, profile:GetIntegration, profile:GetProfileObjectType, profile:ListDomains, profile:ListIntegrations, profile:ListProfileObjectTypes, profile:ListTagsForResource, quicksight:DescribeAnalysis, quicksight:DescribeAnalysisPermissions, quicksight:DescribeDataSet, quicksight:DescribeDataSetPermissions, quicksight:DescribeTheme, quicksight:DescribeThemePermissions, quicksight:ListAnalyses, quicksight:ListDataSets, quicksight:ListThemes, resiliencehub:DescribeApp, resiliencehub:DescribeAppVersionTemplate, resiliencehub:DescribeResiliencyPolicy, resiliencehub:ListApps, resiliencehub:ListAppVersionResourceMappings, resiliencehub:ListResiliencyPolicies, route53-recovery-readiness:GetCell, route53-recovery-readiness:GetReadinessCheck, route53-recovery-readiness:GetRecoveryGroup, route53-recovery-readiness:GetResourceSet, route53-recovery-readiness:ListCells, route53-recovery-readiness:ListReadinessChecks, route53-recovery-readiness:ListRecoveryGroups, route53-recovery-readiness:ListResourceSets, route53resolver:GetFirewallDomainList, route53resolver:GetFirewallRuleGroup, route53resolver:GetFirewallRuleGroupAssociation, route53resolver:GetResolverQueryLogConfig, route53resolver:ListFirewallDomainLists, route53resolver:ListFirewallDomains, route53resolver:ListFirewallRuleGroupAssociations, route53resolver:ListFirewallRuleGroups, route53resolver:ListFirewallRules, route53resolver:ListResolverQueryLogConfigs, rum:GetAppMonitor, rum:GetAppMonitorData, rum:ListAppMonitors, rum:ListTagsForResource, s3-outposts:GetAccessPoint, s3-outposts:GetAccessPointPolicy, s3-outposts:GetBucket, s3-outposts:GetBucketPolicy, s3-outposts:GetBucketTagging, s3-outposts:GetLifecycleConfiguration, s3-outposts:ListAccessPoints, s3-outposts:ListEndpoints, s3-outposts:ListRegionalBuckets, schemas:DescribeDiscoverer, schemas:DescribeRegistry, schemas:DescribeSchema, schemas:ListDiscoverers, schemas:ListRegistries, schemas:ListSchemas, sdb:GetAttributes, sdb:ListDomains, ses:ListEmailTemplates, ses:ListReceiptFilters, ses:ListReceiptRuleSets, ses:ListTemplates, signer:GetSigningProfile, signer:ListProfilePermissions, signer:ListSigningProfiles, synthetics:DescribeCanaries, synthetics:DescribeCanariesLastRun, synthetics:DescribeRuntimeVersions, synthetics:GetCanary, synthetics:GetCanaryRuns, synthetics:ListTagsForResource, timestream:DescribeDatabase, timestream:DescribeTable, timestream:ListDatabases, timestream:ListTables, timestream:ListTagsForResource, transfer:DescribeServer, transfer:DescribeUser, transfer:DescribeWorkflow, transfer:ListServers, transfer:ListUsers, transfer:ListWorkflows, voiceid:DescribeDomain, and voiceid:ListTagsForResource |
Esta política ahora admite permisos adicionales para Amazon AppFlow, Amazon CloudWatch, Amazon CloudWatch RUM, Amazon CloudWatch Synthetics, Amazon Connect Customer Voice ID, Amazon DevOps Guru, Amazon Elastic Compute Cloud (Amazon EC2), Amazon EC2 Auto Scaling, Amazon EMR, Amazon EventBridge, Amazon EventBridge Fraud Detector Amazon FinSpace, Amazon GameLift Servers, Amazon Interactive Video Service (Amazon IVS), Amazon Managed Service para Apache Flink, EC2 Image Builder, Amazon Lex, Amazon Lighting vela, Amazon Location Service, Amazon Lookout for Equipment, Amazon Lookout for Metrics, Amazon Lookout for Vision, Amazon Managed Blockchain, Amazon MQ, Amazon Nimble StudioAmazon Pinpoint, Amazon Quick Amazon Route 53 Resolver, Amazon Application Recovery Controller (ARC), Amazon Simple Storage Service (Amazon S3), Amazon SimpleDB AWS AppConfig AWS AppSync AWS Auto Scaling AWS Backup, Amazon Simple Email Service (Amazon SES) AWS Budgets AWS Cost Explorer AWS Cloud9 AWS Directory Service AWS DataSync, AWS Elemental MediaPackage, AWS Glue, AWS IoT, AWS IoT Analytics, AWS IoT Events, AWS IoT SiteWise, AWS IoT TwinMaker, AWS Lake Formation, AWS License Manager, AWS Resilience Hub, AWS Signer, y AWS Transfer Family |
7 de septiembre de 2022 |
| AWSConfigServiceRolePolicy: añadir airflow:ListTagsForResource, iot:ListCustomMetrics, iot:DescribeCustomMetric, appstream:DescribeDirectoryConfigs, appstream:ListTagsForResource, codeguru-reviewer:DescribeRepositoryAssociation, codeguru-reviewer:ListRepositoryAssociations, healthlake:ListFHIRDatastores, healthlake:DescribeFHIRDatastore, healthlake:ListTagsForResource, kinesisvideo:DescribeStream, kinesisvideo:ListStreams, kinesisvideo:ListTagsForStream, kinesisvideo:DescribeSignalingChannel, kinesisvideo:ListTagsForResource, kinesisvideo:ListSignalingChannels, route53-recovery-control-config:DescribeCluster, route53-recovery-control-config:DescribeRoutingControl, route53-recovery-control-config:DescribeSafetyRule, route53-recovery-control-config:ListClusters, route53-recovery-control-config:ListRoutingControls, route53-recovery-control-config:ListSafetyRules, devicefarm:GetTestGridProject, devicefarm:ListTestGridProjects, ec2:DescribeCapacityReservationFleets, ec2:DescribeIpamPools, ec2:DescribeIpams, ec2:GetInstanceTypesFromInstanceRequirement, mobiletargeting:GetApplicationSettings, mobiletargeting:ListTagsForResource, ecr:BatchGetRepositoryScanningConfiguration, iam:ListServerCertificates, guardduty:ListPublishingDestinations, guardduty:DescribePublishingDestination, logs:GetLogDelivery, and logs:ListLogDeliveries | Esta política ahora admite permisos adicionales para Amazon Managed Workflows para Apache Airflow, AWS IoT Amazon WorkSpaces Applications, Amazon CodeGuru Reviewer AWS HealthLake, Amazon Kinesis Video Streams, Amazon Application Recovery Controller (ARC) AWS Device Farm, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Pinpoint AWS Identity and Access Management (IAM), Amazon y Amazon GuardDuty Logs. CloudWatch | 1 de febrero de 2023 |
|
AWS_ConfigRole: añadir airflow:ListTagsForResource, iot:ListCustomMetrics, iot:DescribeCustomMetric, appstream:DescribeDirectoryConfigs, appstream:ListTagsForResource, codeguru-reviewer:DescribeRepositoryAssociation, codeguru-reviewer:ListRepositoryAssociations, healthlake:ListFHIRDatastores, healthlake:DescribeFHIRDatastore, healthlake:ListTagsForResource, kinesisvideo:DescribeStream, kinesisvideo:ListStreams, kinesisvideo:ListTagsForStream, kinesisvideo:DescribeSignalingChannel, kinesisvideo:ListTagsForResource, kinesisvideo:ListSignalingChannels, route53-recovery-control-config:DescribeCluster, route53-recovery-control-config:DescribeRoutingControl, route53-recovery-control-config:DescribeSafetyRule, route53-recovery-control-config:ListClusters, route53-recovery-control-config:ListRoutingControls, route53-recovery-control-config:ListSafetyRules, devicefarm:GetTestGridProject, devicefarm:ListTestGridProjects, ec2:DescribeCapacityReservationFleets, ec2:DescribeIpamPools, ec2:DescribeIpams, ec2:GetInstanceTypesFromInstanceRequirement, mobiletargeting:GetApplicationSettings, mobiletargeting:ListTagsForResource, ecr:BatchGetRepositoryScanningConfiguration, iam:ListServerCertificates, guardduty:ListPublishingDestinations, guardduty:DescribePublishingDestination, logs:GetLogDelivery, and logs:ListLogDeliveries |
Esta política ahora admite permisos adicionales para Amazon Managed Workflows para Apache Airflow AWS IoT, Amazon WorkSpaces Applications, Amazon CodeGuru Reviewer AWS HealthLake, Amazon Kinesis Video Streams, Amazon Application Recovery Controller (ARC) AWS Device Farm, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Pinpoint AWS Identity and Access Management (IAM) GuardDuty, Amazon y Amazon CloudWatch Logs. |
1 de febrero de 2023 |
|
ConfigConformsServiceRolePolicy: actualizar config:DescribeConfigRules |
Como práctica recomendada de seguridad, ahora esta política elimina el permiso amplio en el nivel de los recursos para |
12 de enero de 2023 |
|
AWSConfigServiceRolePolicy: añadir APS:DescribeRuleGroupsNamespace, APS:DescribeWorkspace, APS:ListWorkspaces, auditmanager:GetAssessment, auditmanager:ListAssessments, devicefarm:GetNetworkProfile, AWS Transfer Family devicefarm:GetProject, devicefarm:ListNetworkProfiles, devicefarm:ListTagsForResource, dms:DescribeEndpoints, ds:ListTagsForResource, ec2:DescribeTags, ec2:DescribeTrafficMirrorSessions, ec2:DescribeTrafficMirrorTargets, ec2:GetIpamPoolAllocations, ec2:GetIpamPoolCidrs, glue:GetMLTransform, glue:GetMLTransforms, glue:ListMLTransforms, iot:DescribeScheduledAudit, iot:ListScheduledAudits, ivs:GetChannel, lightsail:GetRelationalDatabases, mediapackage-vod:DescribePackagingConfiguration, mediapackage-vod:ListPackagingConfigurations, networkmanager:DescribeGlobalNetworks, networkmanager:GetTransitGatewayRegistrations, networkmanager:ListTagsForResource, quicksight:DescribeDashboard, quicksight:DescribeDashboardPermissions, quicksight:DescribeTemplate, quicksight:DescribeTemplatePermissions, quicksight:ListDashboards, quicksight:ListTemplates, ram:ListResources, route53-recovery-control-config:DescribeControlPanel, route53-recovery-control-config:ListControlPanels, route53-recovery-control-config:ListTagsForResource, route53resolver:GetResolverQueryLogConfigAssociation, route53resolver:ListResolverQueryLogConfigAssociations, s3:GetAccessPointForObjectLambda, s3:GetAccessPointPolicyForObjectLambda, s3:GetAccessPointPolicyStatusForObjectLambda, s3:GetMultiRegionAccessPoint, s3:ListAccessPointsForObjectLambda, s3:ListMultiRegionAccessPoints, timestream:DescribeEndpoints, transfer:DescribeConnector, transfer:ListConnectors, and transfer:ListTagsForResource |
Esta política ahora admite permisos adicionales para Amazon Managed Service for Prometheus AWS Audit Manager, AWS Device Farm,, AWS Database Migration Service (AWS DMS) AWS Directory Service, Amazon Elastic Compute Cloud (Amazon EC2) AWS Glue AWS IoT, Amazon Lightsail,, AWS Elemental MediaPackage, Amazon Quick AWS Network Manager AWS Resource Access Manager, Amazon Application Recovery Controller (ARC), Amazon Simple Storage Service (Amazon S3) y Amazon Timestream. |
15 de diciembre de 2022 |
|
AWS_ConfigRole: añadir APS:DescribeRuleGroupsNamespace, APS:DescribeWorkspace, APS:ListWorkspaces, auditmanager:GetAssessment, auditmanager:ListAssessments, devicefarm:GetNetworkProfile, devicefarm:GetProject, devicefarm:ListNetworkProfiles, devicefarm:ListTagsForResource, dms:DescribeEndpoints, ds:ListTagsForResource, ec2:DescribeTags, ec2:DescribeTrafficMirrorSessions, ec2:DescribeTrafficMirrorTargets, ec2:GetIpamPoolAllocations, ec2:GetIpamPoolCidrs, glue:GetMLTransform, glue:GetMLTransforms, glue:ListMLTransforms, iot:DescribeScheduledAudit, iot:ListScheduledAudits, ivs:GetChannel, lightsail:GetRelationalDatabases, mediapackage-vod:DescribePackagingConfiguration, mediapackage-vod:ListPackagingConfigurations, networkmanager:DescribeGlobalNetworks, networkmanager:GetTransitGatewayRegistrations, networkmanager:ListTagsForResource, quicksight:DescribeDashboard, quicksight:DescribeDashboardPermissions, quicksight:DescribeTemplate, quicksight:DescribeTemplatePermissions, quicksight:ListDashboards, quicksight:ListTemplates, ram:ListResources, route53-recovery-control-config:DescribeControlPanel, route53-recovery-control-config:ListControlPanels, route53-recovery-control-config:ListTagsForResource, route53resolver:GetResolverQueryLogConfigAssociation, route53resolver:ListResolverQueryLogConfigAssociations, s3:GetAccessPointForObjectLambda, s3:GetAccessPointPolicyForObjectLambda, s3:GetAccessPointPolicyStatusForObjectLambda, s3:GetMultiRegionAccessPoint, s3:ListAccessPointsForObjectLambda, s3:ListMultiRegionAccessPoints, timestream:DescribeEndpoints, transfer:DescribeConnector, transfer:ListConnectors, and transfer:ListTagsForResource |
Esta política ahora admite permisos adicionales para Amazon Managed Service for Prometheus AWS Audit Manager, AWS Device Farm,, AWS Database Migration Service (AWS DMS) AWS Directory Service, Amazon Elastic Compute Cloud (Amazon EC2) AWS Glue AWS IoT, Amazon Lightsail,, AWS Elemental MediaPackage, Amazon Quick AWS Network Manager AWS Resource Access Manager, Amazon Application Recovery Controller (ARC), Amazon Simple Storage Service (Amazon S3) y Amazon Timestream. |
15 de diciembre de 2022 |
|
AWSConfigServiceRolePolicy: añadir cloudformation:ListStackResources and cloudformation:ListStacks |
Esta política ahora otorga permiso para devolver descripciones de todos los recursos de una AWS CloudFormation pila específica y devolver la información resumida de las pilas cuyo estado coincide con el especificadoStackStatusFilter. |
7 de noviembre de 2022 |
|
AWS_ConfigRole: añadir cloudformation:ListStackResources and cloudformation:ListStacks |
Esta política ahora otorga permiso para devolver descripciones de todos los recursos de una AWS CloudFormation pila específica y devolver la información resumida de las pilas cuyo estado coincide con el especificado. StackStatusFilter |
7 de noviembre de 2022 |
|
AWSConfigServiceRolePolicy: añadir acm-pca:GetCertificateAuthorityCsr, acm-pca:ListCertificateAuthorities, acm-pca:ListTags, airflow:GetEnvironment, airflow:ListEnvironments, amplifyuibuilder:ListThemes, appconfig:ListConfigurationProfiles, appconfig:ListDeployments, appconfig:ListDeploymentStrategies, appconfig:ListEnvironments, appconfig:ListHostedConfigurationVersions, cassandra:Select, cloudwatch:DescribeAnomalyDetectors, cloudwatch:GetDashboard, cloudwatch:ListDashboards, connect:DescribePhoneNumber, connect:ListPhoneNumbers, connect:ListPhoneNumbersV2, connect:SearchAvailablePhoneNumbers, databrew:DescribeDataset, databrew:DescribeJob, databrew:DescribeProject, databrew:DescribeRecipe, databrew:DescribeRuleset, databrew:DescribeSchedule, databrew:ListDatasets, databrew:ListJobs, databrew:ListProjects, databrew:ListRecipes, databrew:ListRecipeVersions, databrew:ListRulesets, databrew:ListSchedules, ec2:DescribeRouteTables, eks:DescribeAddon, eks:DescribeIdentityProviderConfig, eks:ListAddons, eks:ListIdentityProviderConfigs, events:DescribeConnection, events:ListApiDestinations, events:ListConnections, fis:GetExperimentTemplate, fis:ListExperimentTemplates, frauddetector:GetRules, fsx:DescribeBackups, fsx:DescribeSnapshots, fsx:DescribeStorageVirtualMachines, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeVpcPeeringConnections, geo:ListGeofenceCollections, geo:ListPlaceIndexes, geo:ListRouteCalculators, geo:ListTrackers, iot:DescribeAccountAuditConfiguration, iot:DescribeAuthorizer, iot:DescribeDomainConfiguration, iot:DescribeMitigationAction, iot:ListAuthorizers, iot:ListDomainConfigurations, iot:ListMitigationActions, iotsitewise:DescribeAssetModel, iotsitewise:DescribeDashboard, iotsitewise:DescribeGateway, iotsitewise:DescribePortal, iotsitewise:DescribeProject, iotsitewise:ListAssetModels, iotsitewise:ListDashboards, iotsitewise:ListGateways, iotsitewise:ListPortals, iotsitewise:ListProjectAssets, iotsitewise:ListProjects, iotsitewise:ListTagsForResource, iotwireless:GetServiceProfile, iotwireless:GetWirelessDevice, iotwireless:GetWirelessGatewayTaskDefinition, iotwireless:ListServiceProfiles, iotwireless:ListTagsForResource, iotwireless:ListWirelessDevices, iotwireless:ListWirelessGatewayTaskDefinitions, lex:DescribeBotVersion, lex:ListBotVersions, lightsail:GetContainerServices, lightsail:GetDistributions, lightsail:GetRelationalDatabase, lightsail:GetRelationalDatabaseParameters, mobiletargeting:GetApps, mobiletargeting:GetCampaign, mobiletargeting:GetSegment, mobiletargeting:GetSegments, opsworks:DescribeInstances, opsworks:DescribeTimeBasedAutoScaling, opsworks:DescribeVolumes, panorama:DescribeApplicationInstance, panorama:DescribeApplicationInstanceDetails, panorama:DescribePackage, panorama:DescribePackageVersion, panorama:ListApplicationInstances, panorama:ListPackages, quicksight:ListDataSources, ram:ListResourceSharePermissions, rds:DescribeDBProxies, rds:DescribeGlobalClusters, rekognition:ListStreamProcessors, resource-groups:GetGroup, resource-groups:GetGroupConfiguration, resource-groups:GetGroupQuery, resource-groups:GetTags, resource-groups:ListGroupResources, resource-groups:ListGroups, robomaker:ListRobotApplications, robomaker:ListSimulationApplications, route53resolver:GetResolverDnssecConfig, route53resolver:ListResolverDnssecConfigs, s3:ListStorageLensConfigurations, schemas:GetResourcePolicy, servicediscovery:ListInstances, sts:GetCallerIdentity, synthetics:GetGroup, synthetics:ListAssociatedGroups, synthetics:ListGroupResources, and synthetics:ListGroups |
Esta política ahora admite permisos adicionales para AWS Certificate Manager Amazon Managed Workflows para Apache Airflow, Amazon Keyspaces, Amazon AWS Amplify AWS AppConfig, Connect Customer CloudWatch, Amazon Elastic Compute Cloud (Amazon EC2) AWS Glue DataBrew, Amazon Elastic Kubernetes Service (Amazon EKS), Amazon Fraud Detector, Amazon FSx, Amazon GameLift Servers, Amazon Location Service EventBridge AWS Fault Injection Service, Amazon Lex, Amazon Lightsail, Amazon Pinpoint, Amazon Quick, Amazon Relational Database Service (Amazon Rational Database Service (Amazon Rational Database Service) (Amazon Rational Database Service (Amazon Rational Database Service) DS), AWS IoT OpsWorks AWS Panorama AWS Resource Access Manager Amazon Rekognition AWS RoboMaker Grupos de recursos de AWS, Amazon Route 53, Amazon Simple Storage Service (Amazon S3) y AWS Security Token Service. AWS Cloud Map |
19 de octubre de 2022 |
|
AWS_ConfigRole: añadir acm-pca:GetCertificateAuthorityCsr, acm-pca:ListCertificateAuthorities, acm-pca:ListTags, airflow:GetEnvironment, airflow:ListEnvironments, amplifyuibuilder:ListThemes, appconfig:ListConfigurationProfiles, appconfig:ListDeployments, appconfig:ListDeploymentStrategies, appconfig:ListEnvironments, appconfig:ListHostedConfigurationVersions, cassandra:Select, cloudwatch:DescribeAnomalyDetectors, cloudwatch:GetDashboard, cloudwatch:ListDashboards, connect:DescribePhoneNumber, connect:ListPhoneNumbers, connect:ListPhoneNumbersV2, connect:SearchAvailablePhoneNumbers, databrew:DescribeDataset, databrew:DescribeJob, databrew:DescribeProject, databrew:DescribeRecipe, databrew:DescribeRuleset, databrew:DescribeSchedule, databrew:ListDatasets, databrew:ListJobs, databrew:ListProjects, databrew:ListRecipes, databrew:ListRecipeVersions, databrew:ListRulesets, databrew:ListSchedules, ec2:DescribeRouteTables, eks:DescribeAddon, eks:DescribeIdentityProviderConfig, eks:ListAddons, eks:ListIdentityProviderConfigs, events:DescribeConnection, events:ListApiDestinations, events:ListConnections, fis:GetExperimentTemplate, fis:ListExperimentTemplates, frauddetector:GetRules, fsx:DescribeBackups, fsx:DescribeSnapshots, fsx:DescribeStorageVirtualMachines, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeVpcPeeringConnections, geo:ListGeofenceCollections, geo:ListPlaceIndexes, geo:ListRouteCalculators, geo:ListTrackers, iot:DescribeAccountAuditConfiguration, iot:DescribeAuthorizer, iot:DescribeDomainConfiguration, iot:DescribeMitigationAction, iot:ListAuthorizers, iot:ListDomainConfigurations, iot:ListMitigationActions, iotsitewise:DescribeAssetModel, iotsitewise:DescribeDashboard, iotsitewise:DescribeGateway, iotsitewise:DescribePortal, iotsitewise:DescribeProject, iotsitewise:ListAssetModels, iotsitewise:ListDashboards, iotsitewise:ListGateways, iotsitewise:ListPortals, iotsitewise:ListProjectAssets, iotsitewise:ListProjects, iotsitewise:ListTagsForResource, iotwireless:GetServiceProfile, iotwireless:GetWirelessDevice, iotwireless:GetWirelessGatewayTaskDefinition, iotwireless:ListServiceProfiles, iotwireless:ListTagsForResource, iotwireless:ListWirelessDevices, iotwireless:ListWirelessGatewayTaskDefinitions, lex:DescribeBotVersion, lex:ListBotVersions, lightsail:GetContainerServices, lightsail:GetDistributions, lightsail:GetRelationalDatabase, lightsail:GetRelationalDatabaseParameters, mobiletargeting:GetApps, mobiletargeting:GetCampaign, mobiletargeting:GetSegment, mobiletargeting:GetSegments, opsworks:DescribeInstances, opsworks:DescribeTimeBasedAutoScaling, opsworks:DescribeVolumes, panorama:DescribeApplicationInstance, panorama:DescribeApplicationInstanceDetails, panorama:DescribePackage, panorama:DescribePackageVersion, panorama:ListApplicationInstances, panorama:ListPackages, quicksight:ListDataSources, ram:ListResourceSharePermissions, rds:DescribeDBProxies, rds:DescribeGlobalClusters, rekognition:ListStreamProcessors, resource-groups:GetGroup, resource-groups:GetGroupConfiguration, resource-groups:GetGroupQuery, resource-groups:GetTags, resource-groups:ListGroupResources, resource-groups:ListGroups, robomaker:ListRobotApplications, robomaker:ListSimulationApplications, route53resolver:GetResolverDnssecConfig, route53resolver:ListResolverDnssecConfigs, s3:ListStorageLensConfigurations, schemas:GetResourcePolicy, servicediscovery:ListInstances, sts:GetCallerIdentity, synthetics:GetGroup, synthetics:ListAssociatedGroups, synthetics:ListGroupResources, and synthetics:ListGroups |
Esta política ahora admite permisos adicionales para AWS Certificate Manager Amazon Managed Workflows para Apache Airflow, Amazon Keyspaces, Amazon AWS Amplify AWS AppConfig, Connect Customer CloudWatch, Amazon Elastic Compute Cloud (Amazon EC2) AWS Glue DataBrew, Amazon Elastic Kubernetes Service (Amazon EKS), Amazon Fraud Detector, Amazon FSx, Amazon GameLift Servers, Amazon Location Service EventBridge AWS Fault Injection Service, Amazon Lex, Amazon Lightsail, Amazon Pinpoint, Amazon Quick, Amazon Relational Database Service (Amazon Rational Database Service (Amazon Rational Database Service) (Amazon Rational Database Service (Amazon Rational Database Service) DS), AWS IoT OpsWorks AWS Panorama AWS Resource Access Manager Amazon Rekognition AWS RoboMaker Grupos de recursos de AWS, Amazon Route 53, Amazon Simple Storage Service (Amazon S3) y AWS Security Token Service. AWS Cloud Map |
19 de octubre de 2022 |
|
AWSConfigServiceRolePolicy: añadir Glue::GetTable |
Esta política ahora otorga permiso para recuperar la definición de la AWS Glue tabla en un catálogo de datos para una tabla específica. |
14 de septiembre de 2022 |
|
AWS_ConfigRole: añadir Glue::GetTable |
Esta política ahora otorga permiso para recuperar la definición de la AWS Glue tabla en un catálogo de datos para una tabla específica. |
14 de septiembre de 2022 |
|
AWSConfigServiceRolePolicy: añadir appconfig:ListApplications, appflow:DescribeConnectorProfiles, appsync:GetApiCache, autoscaling-plans:DescribeScalingPlanResources, autoscaling-plans:DescribeScalingPlans, autoscaling-plans:GetScalingPlanResourceForecastData, autoscaling:DescribeWarmPool, backup:DescribeFramework, backup:DescribeReportPlan, backup:ListFrameworks, backup:ListReportPlans, budgets:DescribeBudgetAction, budgets:DescribeBudgetActionsForAccount, budgets:DescribeBudgetActionsForBudget, budgets:ViewBudget, ce:GetAnomalyMonitors, ce:GetAnomalySubscriptions, cloud9:DescribeEnvironmentMemberships, cloud9:DescribeEnvironments, cloud9:ListEnvironments, cloud9:ListTagsForResource, cloudwatch:GetMetricStream, cloudwatch:ListMetricStreams, datasync:DescribeLocationFsxWindows, devops-guru:GetResourceCollection, ds:DescribeDirectories, ec2:DescribeTrafficMirrorFilters, ec2:DescribeTrafficMirrorTargets, ec2:GetNetworkInsightsAccessScopeAnalysisFindings, ec2:GetNetworkInsightsAccessScopeContent, elasticmapreduce:DescribeStudio, elasticmapreduce:GetStudioSessionMapping, elasticmapreduce:ListStudios, elasticmapreduce:ListStudioSessionMappings, events:DescribeEndpoint, events:DescribeEventBus, events:DescribeRule, events:ListArchives, events:ListEndpoints, events:ListEventBuses, events:ListRules, events:ListTagsForResource, events:ListTargetsByRule, finspace:GetEnvironment, finspace:ListEnvironments, frauddetector:GetDetectors, frauddetector:GetDetectorVersion, frauddetector:GetEntityTypes, frauddetector:GetEventTypes, frauddetector:GetExternalModels, frauddetector:GetLabels, frauddetector:GetModels, frauddetector:GetOutcomes, frauddetector:GetVariables, frauddetector:ListTagsForResource, gamelift:DescribeAlias, gamelift:DescribeBuild, gamelift:DescribeFleetAttributes, gamelift:DescribeFleetCapacity, gamelift:DescribeFleetLocationAttributes, gamelift:DescribeFleetLocationCapacity, gamelift:DescribeFleetPortSettings, gamelift:DescribeGameServerGroup, gamelift:DescribeGameSessionQueues, gamelift:DescribeMatchmakingConfigurations, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeRuntimeConfiguration, gamelift:DescribeScript, gamelift:DescribeVpcPeeringAuthorizations, gamelift:ListAliases, gamelift:ListBuilds, gamelift:ListFleets, gamelift:ListGameServerGroups, gamelift:ListScripts, gamelift:ListTagsForResource, geo:ListMaps, glue:GetClassifier, glue:GetClassifiers, imagebuilder:GetContainerRecipe, imagebuilder:GetImage, imagebuilder:GetImagePipeline, imagebuilder:GetImageRecipe, imagebuilder:ListContainerRecipes, imagebuilder:ListImageBuildVersions, imagebuilder:ListImagePipelines, imagebuilder:ListImageRecipes, imagebuilder:ListImages, iot:DescribeCertificate, iot:DescribeDimension, iot:DescribeRoleAlias, iot:DescribeSecurityProfile, iot:GetPolicy, iot:GetTopicRule, iot:GetTopicRuleDestination, iot:ListCertificates, iot:ListDimensions, iot:ListPolicies, iot:ListRoleAliases, iot:ListSecurityProfiles, iot:ListSecurityProfilesForTarget, iot:ListTagsForResource, iot:ListTargetsForSecurityProfile, iot:ListTopicRuleDestinations, iot:ListTopicRules, iot:ListV2LoggingLevels, iot:ValidateSecurityProfileBehaviors, iotanalytics:DescribeChannel, iotanalytics:DescribeDataset, iotanalytics:DescribeDatastore, iotanalytics:DescribePipeline, iotanalytics:ListChannels, iotanalytics:ListDatasets, iotanalytics:ListDatastores, iotanalytics:ListPipelines, iotanalytics:ListTagsForResource, iotevents:DescribeAlarmModel, iotevents:DescribeDetectorModel, iotevents:DescribeInput, iotevents:ListAlarmModels, iotevents:ListDetectorModels, iotevents:ListInputs, iotevents:ListTagsForResource, iotsitewise:DescribeAccessPolicy, iotsitewise:DescribeAsset, iotsitewise:ListAccessPolicies, iotsitewise:ListAssets, iottwinmaker:GetEntity, iottwinmaker:GetScene, iottwinmaker:GetWorkspace, iottwinmaker:ListEntities, iottwinmaker:ListScenes, iottwinmaker:ListTagsForResource, iottwinmaker:ListWorkspaces, ivs:GetPlaybackKeyPair, ivs:GetRecordingConfiguration, ivs:GetStreamKey, ivs:ListChannels, ivs:ListPlaybackKeyPairs, ivs:ListRecordingConfigurations, ivs:ListStreamKeys, ivs:ListTagsForResource, kinesisanalytics:ListApplications, lakeformation:DescribeResource, lakeformation:GetDataLakeSettings, lakeformation:ListPermissions, lakeformation:ListResources, lex:DescribeBot, lex:DescribeBotAlias, lex:DescribeResourcePolicy, lex:ListBotAliases, lex:ListBotLocales, lex:ListBots, lex:ListTagsForResource, license-manager:GetGrant, license-manager:GetLicense, license-manager:ListDistributedGrants, license-manager:ListLicenses, license-manager:ListReceivedGrants, lightsail:GetAlarms, lightsail:GetBuckets, lightsail:GetCertificates, lightsail:GetDisk, lightsail:GetDisks, lightsail:GetInstance, lightsail:GetInstances, lightsail:GetKeyPair, lightsail:GetLoadBalancer, lightsail:GetLoadBalancers, lightsail:GetLoadBalancerTlsCertificates, lightsail:GetStaticIp, lightsail:GetStaticIps, lookoutequipment:DescribeInferenceScheduler, lookoutequipment:ListTagsForResource, lookoutmetrics:DescribeAlert, lookoutmetrics:DescribeAnomalyDetector, lookoutmetrics:ListAlerts, lookoutmetrics:ListAnomalyDetectors, lookoutmetrics:ListMetricSets, lookoutmetrics:ListTagsForResource, lookoutvision:DescribeProject, lookoutvision:ListProjects, managedblockchain:GetMember, managedblockchain:GetNetwork, managedblockchain:GetNode, managedblockchain:ListInvitations, managedblockchain:ListMembers, managedblockchain:ListNodes, mediapackage-vod:DescribePackagingGroup, mediapackage-vod:ListPackagingGroups, mediapackage-vod:ListTagsForResource, mobiletargeting:GetInAppTemplate, mobiletargeting:ListTemplates, mq:DescribeBroker, mq:ListBrokers, nimble:GetLaunchProfile, nimble:GetLaunchProfileDetails, nimble:GetStreamingImage, nimble:GetStudio, nimble:GetStudioComponent, nimble:ListLaunchProfiles, nimble:ListStreamingImages, nimble:ListStudioComponents, nimble:ListStudios, profile:GetDomain, profile:GetIntegration, profile:GetProfileObjectType, profile:ListDomains, profile:ListIntegrations, profile:ListProfileObjectTypes, profile:ListTagsForResource, quicksight:DescribeAnalysis, quicksight:DescribeAnalysisPermissions, quicksight:DescribeDataSet, quicksight:DescribeDataSetPermissions, quicksight:DescribeTheme, quicksight:DescribeThemePermissions, quicksight:ListAnalyses, quicksight:ListDataSets, quicksight:ListThemes, resiliencehub:DescribeApp, resiliencehub:DescribeAppVersionTemplate, resiliencehub:DescribeResiliencyPolicy, resiliencehub:ListApps, resiliencehub:ListAppVersionResourceMappings, resiliencehub:ListResiliencyPolicies, route53-recovery-readiness:GetCell, route53-recovery-readiness:GetReadinessCheck, route53-recovery-readiness:GetRecoveryGroup, route53-recovery-readiness:GetResourceSet, route53-recovery-readiness:ListCells, route53-recovery-readiness:ListReadinessChecks, route53-recovery-readiness:ListRecoveryGroups, route53-recovery-readiness:ListResourceSets, route53resolver:GetFirewallDomainList, route53resolver:GetFirewallRuleGroup, route53resolver:GetFirewallRuleGroupAssociation, route53resolver:GetResolverQueryLogConfig, route53resolver:ListFirewallDomainLists, route53resolver:ListFirewallDomains, route53resolver:ListFirewallRuleGroupAssociations, route53resolver:ListFirewallRuleGroups, route53resolver:ListFirewallRules, route53resolver:ListResolverQueryLogConfigs, rum:GetAppMonitor, rum:GetAppMonitorData, rum:ListAppMonitors, rum:ListTagsForResource, s3-outposts:GetAccessPoint, s3-outposts:GetAccessPointPolicy, s3-outposts:GetBucket, s3-outposts:GetBucketPolicy, s3-outposts:GetBucketTagging, s3-outposts:GetLifecycleConfiguration, s3-outposts:ListAccessPoints, s3-outposts:ListEndpoints, s3-outposts:ListRegionalBuckets, schemas:DescribeDiscoverer, schemas:DescribeRegistry, schemas:DescribeSchema, schemas:ListDiscoverers, schemas:ListRegistries, schemas:ListSchemas, sdb:GetAttributes, sdb:ListDomains, ses:ListEmailTemplates, ses:ListReceiptFilters, ses:ListReceiptRuleSets, ses:ListTemplates, signer:GetSigningProfile, signer:ListProfilePermissions, signer:ListSigningProfiles, synthetics:DescribeCanaries, synthetics:DescribeCanariesLastRun, synthetics:DescribeRuntimeVersions, synthetics:GetCanary, synthetics:GetCanaryRuns, synthetics:ListTagsForResource, timestream:DescribeDatabase, timestream:DescribeTable, timestream:ListDatabases, timestream:ListTables, timestream:ListTagsForResource, transfer:DescribeServer, transfer:DescribeUser, transfer:DescribeWorkflow, transfer:ListServers, transfer:ListUsers, transfer:ListWorkflows, voiceid:DescribeDomain, and voiceid:ListTagsForResource |
Esta política ahora admite permisos adicionales para Amazon AppFlow, Amazon CloudWatch, Amazon CloudWatch RUM, Amazon CloudWatch Synthetics, Amazon Connect Customer Voice ID, Amazon DevOps Guru, Amazon Elastic Compute Cloud (Amazon EC2), Amazon EC2 Auto Scaling, Amazon EMR, Amazon EventBridge, Amazon EventBridge Fraud Detector Amazon FinSpace, Amazon GameLift Servers, Amazon Interactive Video Service (Amazon IVS), Amazon Managed Service para Apache Flink, EC2 Image Builder, Amazon Lex, Amazon Lighting vela, Amazon Location Service, Amazon Lookout for Equipment, Amazon Lookout for Metrics, Amazon Lookout for Vision, Amazon Managed Blockchain, Amazon MQ, Amazon Nimble StudioAmazon Pinpoint, Amazon Quick Amazon Route 53 Resolver, Amazon Application Recovery Controller (ARC), Amazon Simple Storage Service (Amazon S3), Amazon SimpleDB AWS AppConfig AWS AppSync AWS Auto Scaling AWS Backup, Amazon Simple Email Service (Amazon SES) AWS Budgets AWS Cost Explorer AWS Cloud9 AWS Directory Service AWS DataSync, AWS Elemental MediaPackage, AWS Glue, AWS IoT, AWS IoT Analytics, AWS IoT Events, AWS IoT SiteWise, AWS IoT TwinMaker, AWS Lake Formation, AWS License Manager, AWS Resilience Hub, AWS Signer, y AWS Transfer Family. |
7 de septiembre de 2022 |
|
AWS_ConfigRole: añadir appconfig:ListApplications, appflow:DescribeConnectorProfiles, appsync:GetApiCache, autoscaling-plans:DescribeScalingPlanResources, autoscaling-plans:DescribeScalingPlans, autoscaling-plans:GetScalingPlanResourceForecastData, autoscaling:DescribeWarmPool, backup:DescribeFramework, backup:DescribeReportPlan, backup:ListFrameworks, backup:ListReportPlans, budgets:DescribeBudgetAction, budgets:DescribeBudgetActionsForAccount, budgets:DescribeBudgetActionsForBudget, budgets:ViewBudget, ce:GetAnomalyMonitors, ce:GetAnomalySubscriptions, cloud9:DescribeEnvironmentMemberships, cloud9:DescribeEnvironments, cloud9:ListEnvironments, cloud9:ListTagsForResource, cloudwatch:GetMetricStream, cloudwatch:ListMetricStreams, datasync:DescribeLocationFsxWindows, devops-guru:GetResourceCollection, ds:DescribeDirectories, ec2:DescribeTrafficMirrorTargets, ec2:GetNetworkInsightsAccessScopeAnalysisFindings, ec2:GetNetworkInsightsAccessScopeContent, elasticmapreduce:DescribeStudio, elasticmapreduce:GetStudioSessionMapping, elasticmapreduce:ListStudios, elasticmapreduce:ListStudioSessionMappings, events:DescribeEndpoint, events:DescribeEventBus, events:DescribeRule, events:ListArchives, events:ListEndpoints, events:ListEventBuses, events:ListRules, events:ListTagsForResource, events:ListTargetsByRule, finspace:GetEnvironment, finspace:ListEnvironments, frauddetector:GetDetectors, frauddetector:GetDetectorVersion, frauddetector:GetEntityTypes, frauddetector:GetEventTypes, frauddetector:GetExternalModels, frauddetector:GetLabels, frauddetector:GetModels, frauddetector:GetOutcomes, frauddetector:GetVariables, frauddetector:ListTagsForResource, gamelift:DescribeAlias, gamelift:DescribeBuild, gamelift:DescribeFleetAttributes, gamelift:DescribeFleetCapacity, gamelift:DescribeFleetLocationAttributes, gamelift:DescribeFleetLocationCapacity, gamelift:DescribeFleetPortSettings, gamelift:DescribeGameServerGroup, gamelift:DescribeGameSessionQueues, gamelift:DescribeMatchmakingConfigurations, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeRuntimeConfiguration, gamelift:DescribeScript, gamelift:DescribeVpcPeeringAuthorizations, gamelift:ListAliases, gamelift:ListBuilds, gamelift:ListFleets, gamelift:ListGameServerGroups, gamelift:ListScripts, gamelift:ListTagsForResource, geo:ListMaps, glue:GetClassifier, glue:GetClassifiers, imagebuilder:GetContainerRecipe, imagebuilder:GetImage, imagebuilder:GetImagePipeline, imagebuilder:GetImageRecipe, imagebuilder:ListContainerRecipes, imagebuilder:ListImageBuildVersions, imagebuilder:ListImagePipelines, imagebuilder:ListImageRecipes, imagebuilder:ListImages, iot:DescribeCertificate, iot:DescribeDimension, iot:DescribeRoleAlias, iot:DescribeSecurityProfile, iot:GetPolicy, iot:GetTopicRule, iot:GetTopicRuleDestination, iot:ListCertificates, iot:ListDimensions, iot:ListPolicies, iot:ListRoleAliases, iot:ListSecurityProfiles, iot:ListSecurityProfilesForTarget, iot:ListTagsForResource, iot:ListTargetsForSecurityProfile, iot:ListTopicRuleDestinations, iot:ListTopicRules, iot:ListV2LoggingLevels, iot:ValidateSecurityProfileBehaviors, iotanalytics:DescribeChannel, iotanalytics:DescribeDataset, iotanalytics:DescribeDatastore, iotanalytics:DescribePipeline, iotanalytics:ListChannels, iotanalytics:ListDatasets, iotanalytics:ListDatastores, iotanalytics:ListPipelines, iotanalytics:ListTagsForResource, iotevents:DescribeAlarmModel, iotevents:DescribeDetectorModel, iotevents:DescribeInput, iotevents:ListAlarmModels, iotevents:ListDetectorModels, iotevents:ListInputs, iotevents:ListTagsForResource, iotsitewise:DescribeAccessPolicy, iotsitewise:DescribeAsset, iotsitewise:ListAccessPolicies, iotsitewise:ListAssets, iottwinmaker:GetEntity, iottwinmaker:GetScene, iottwinmaker:GetWorkspace, iottwinmaker:ListEntities, iottwinmaker:ListScenes, iottwinmaker:ListTagsForResource, iottwinmaker:ListWorkspaces, ivs:GetPlaybackKeyPair, ivs:GetRecordingConfiguration, ivs:GetStreamKey, ivs:ListChannels, ivs:ListPlaybackKeyPairs, ivs:ListRecordingConfigurations, ivs:ListStreamKeys, ivs:ListTagsForResource, kinesisanalytics:ListApplications, lakeformation:DescribeResource, lakeformation:GetDataLakeSettings, lakeformation:ListPermissions, lakeformation:ListResources, lex:DescribeBot, lex:DescribeBotAlias, lex:DescribeResourcePolicy, lex:ListBotAliases, lex:ListBotLocales, lex:ListBots, lex:ListTagsForResource, license-manager:GetGrant, license-manager:GetLicense, license-manager:ListDistributedGrants, license-manager:ListLicenses, license-manager:ListReceivedGrants, lightsail:GetAlarms, lightsail:GetBuckets, lightsail:GetCertificates, lightsail:GetDisk, lightsail:GetDisks, lightsail:GetInstance, lightsail:GetInstances, lightsail:GetKeyPair, lightsail:GetLoadBalancer, lightsail:GetLoadBalancers, lightsail:GetLoadBalancerTlsCertificates, lightsail:GetStaticIp, lightsail:GetStaticIps, lookoutequipment:DescribeInferenceScheduler, lookoutequipment:ListTagsForResource, lookoutmetrics:DescribeAlert, lookoutmetrics:DescribeAnomalyDetector, lookoutmetrics:ListAlerts, lookoutmetrics:ListAnomalyDetectors, lookoutmetrics:ListMetricSets, lookoutmetrics:ListTagsForResource, lookoutvision:DescribeProject, lookoutvision:ListProjects, managedblockchain:GetMember, managedblockchain:GetNetwork, managedblockchain:GetNode, managedblockchain:ListInvitations, managedblockchain:ListMembers, managedblockchain:ListNodes, mediapackage-vod:DescribePackagingGroup, mediapackage-vod:ListPackagingGroups, mediapackage-vod:ListTagsForResource, mobiletargeting:GetInAppTemplate, mobiletargeting:ListTemplates, mq:DescribeBroker, mq:ListBrokers, nimble:GetLaunchProfile, nimble:GetLaunchProfileDetails, nimble:GetStreamingImage, nimble:GetStudio, nimble:GetStudioComponent, nimble:ListLaunchProfiles, nimble:ListStreamingImages, nimble:ListStudioComponents, nimble:ListStudios, profile:GetDomain, profile:GetIntegration, profile:GetProfileObjectType, profile:ListDomains, profile:ListIntegrations, profile:ListProfileObjectTypes, profile:ListTagsForResource, quicksight:DescribeAnalysis, quicksight:DescribeAnalysisPermissions, quicksight:DescribeDataSet, quicksight:DescribeDataSetPermissions, quicksight:DescribeTheme, quicksight:DescribeThemePermissions, quicksight:ListAnalyses, quicksight:ListDataSets, quicksight:ListThemes, resiliencehub:DescribeApp, resiliencehub:DescribeAppVersionTemplate, resiliencehub:DescribeResiliencyPolicy, resiliencehub:ListApps, resiliencehub:ListAppVersionResourceMappings, resiliencehub:ListResiliencyPolicies, route53-recovery-readiness:GetCell, route53-recovery-readiness:GetReadinessCheck, route53-recovery-readiness:GetRecoveryGroup, route53-recovery-readiness:GetResourceSet, route53-recovery-readiness:ListCells, route53-recovery-readiness:ListReadinessChecks, route53-recovery-readiness:ListRecoveryGroups, route53-recovery-readiness:ListResourceSets, route53resolver:GetFirewallDomainList, route53resolver:GetFirewallRuleGroup, route53resolver:GetFirewallRuleGroupAssociation, route53resolver:GetResolverQueryLogConfig, route53resolver:ListFirewallDomainLists, route53resolver:ListFirewallDomains, route53resolver:ListFirewallRuleGroupAssociations, route53resolver:ListFirewallRuleGroups, route53resolver:ListFirewallRules, route53resolver:ListResolverQueryLogConfigs, rum:GetAppMonitor, rum:GetAppMonitorData, rum:ListAppMonitors, rum:ListTagsForResource, s3-outposts:GetAccessPoint, s3-outposts:GetAccessPointPolicy, s3-outposts:GetBucket, s3-outposts:GetBucketPolicy, s3-outposts:GetBucketTagging, s3-outposts:GetLifecycleConfiguration, s3-outposts:ListAccessPoints, s3-outposts:ListEndpoints, s3-outposts:ListRegionalBuckets, schemas:DescribeDiscoverer, schemas:DescribeRegistry, schemas:DescribeSchema, schemas:ListDiscoverers, schemas:ListRegistries, schemas:ListSchemas, sdb:GetAttributes, sdb:ListDomains, ses:ListEmailTemplates, ses:ListReceiptFilters, ses:ListReceiptRuleSets, ses:ListTemplates, signer:GetSigningProfile, signer:ListProfilePermissions, signer:ListSigningProfiles, synthetics:DescribeCanaries, synthetics:DescribeCanariesLastRun, synthetics:DescribeRuntimeVersions, synthetics:GetCanary, synthetics:GetCanaryRuns, synthetics:ListTagsForResource, timestream:DescribeDatabase, timestream:DescribeTable, timestream:ListDatabases, timestream:ListTables, timestream:ListTagsForResource, transfer:DescribeServer, transfer:DescribeUser, transfer:DescribeWorkflow, transfer:ListServers, transfer:ListUsers, transfer:ListWorkflows, voiceid:DescribeDomain, and voiceid:ListTagsForResource |
Esta política ahora admite permisos adicionales para Amazon AppFlow, Amazon CloudWatch, Amazon CloudWatch RUM, Amazon CloudWatch Synthetics, Amazon Connect Customer Voice ID, Amazon DevOps Guru, Amazon Elastic Compute Cloud (Amazon EC2), Amazon EC2 Auto Scaling, Amazon EMR, Amazon EventBridge, Amazon EventBridge Fraud Detector Amazon FinSpace, Amazon GameLift Servers, Amazon Interactive Video Service (Amazon IVS), Amazon Managed Service para Apache Flink, EC2 Image Builder, Amazon Lex, Amazon Lighting vela, Amazon Location Service, Amazon Lookout for Equipment, Amazon Lookout for Metrics, Amazon Lookout for Vision, Amazon Managed Blockchain, Amazon MQ, Amazon Nimble StudioAmazon Pinpoint, Amazon Quick Amazon Route 53 Resolver, Amazon Application Recovery Controller (ARC), Amazon Simple Storage Service (Amazon S3), Amazon SimpleDB AWS AppConfig AWS AppSync AWS Auto Scaling AWS Backup, Amazon Simple Email Service (Amazon SES) AWS Budgets AWS Cost Explorer AWS Cloud9 AWS Directory Service AWS DataSync, AWS Elemental MediaPackage, AWS Glue, AWS IoT, AWS IoT Analytics, AWS IoT Events, AWS IoT SiteWise, AWS IoT TwinMaker, AWS Lake Formation, AWS License Manager, AWS Resilience Hub, AWS Signer, y AWS Transfer Family |
7 de septiembre de 2022 |
|
AWSConfigServiceRolePolicy: añadir datasync:ListAgents, datasync:ListLocations, datasync:ListTasks, servicediscovery:ListNamespaces, servicediscovery:ListServices, and ses:ListContactLists |
Esta política ahora permite devolver una lista de AWS DataSync agentes, ubicaciones de DataSync origen y destino y DataSync tareas en una Cuenta de AWS; incluir información resumida sobre los AWS Cloud Map espacios de nombres y servicios que están asociados a uno o más espacios de nombres específicos en una Cuenta de AWS; y enumerar todas las listas de contactos de Amazon Simple Email Service (Amazon SES) disponibles en. Cuenta de AWS |
22 de agosto de 2022 |
|
AWS_ConfigRole: añadir datasync:ListAgents, datasync:ListLocations, datasync:ListTasks, servicediscovery:ListNamespaces, servicediscovery:ListServices, and ses:ListContactLists |
Esta política ahora otorga permiso para devolver una lista de AWS DataSync agentes, ubicaciones de DataSync origen y destino y DataSync tareas en una Cuenta de AWS; enumerar información resumida sobre los AWS Cloud Map espacios de nombres y servicios que están asociados a uno o más espacios de nombres específicos en una Cuenta de AWS; y enumerar todas las listas de contactos de Amazon Simple Email Service (Amazon SES) disponibles en Cuenta de AWS. |
22 de agosto de 2022 |
|
ConfigConformsServiceRolePolicy: añadir cloudwatch:PutMetricData |
Esta política ahora otorga permiso para publicar puntos de datos métricos en Amazon. CloudWatch |
25 de julio de 2022 |
|
AWSConfigServiceRolePolicy: añadir amplifyuibuilder:ExportThemes, amplifyuibuilder:GetTheme, appconfig:GetApplication, appconfig:GetApplication, appconfig:GetConfigurationProfile, appconfig:GetConfigurationProfile, appconfig:GetDeployment, appconfig:GetDeploymentStrategy, appconfig:GetEnvironment, appconfig:GetHostedConfigurationVersion, appconfig:ListTagsForResource, appsync:GetGraphqlApi, appsync:ListGraphqlApis, billingconductor: ListPricingRulesAssociatedToPricingPlan, billingconductor:ListAccountAssociations, billingconductor:ListBillingGroups, billingconductor:ListCustomLineItems, billingconductor:ListPricingPlans, billingconductor:ListPricingRules, billingconductor:ListTagsForResource, datasync:DescribeAgent, datasync:DescribeLocationEfs, datasync:DescribeLocationFsxLustre, datasync:DescribeLocationHdfs, datasync:DescribeLocationNfs, datasync:DescribeLocationObjectStorage, datasync:DescribeLocationS3, datasync:DescribeLocationSmb, datasync:DescribeTask, datasync:ListTagsForResource, ecr:DescribePullThroughCacheRules, ecr:DescribeRegistry, ecr:GetRegistryPolicy, elasticache:DescribeCacheParameters, elasticloadbalancing:DescribeListenerCertificates, elasticloadbalancing:DescribeTargetGroupAttributes, elasticloadbalancing:DescribeTargetGroups, elasticloadbalancing:DescribeTargetHealth, events:DescribeApiDestination, events:DescribeArchive, fms:GetNotificationChannel, fms:GetPolicy, fms:ListPolicies, fms:ListTagsForResource, fsx:DescribeVolumes, geo:DescribeGeofenceCollection, geo:DescribeMap, geo:DescribePlaceIndex, geo:DescribeRouteCalculator, geo:DescribeTracker, geo:ListTrackerConsumers, glue:BatchGetJobs, glue:BatchGetWorkflows, glue:GetCrawler, glue:GetCrawlers, glue:GetJob, glue:GetJobs, glue:GetWorkflow, imagebuilder: GetComponent, imagebuilder: ListComponentBuildVersions, imagebuilder: ListComponents, imagebuilder:GetDistributionConfiguration, imagebuilder:GetInfrastructureConfiguration, imagebuilder:ListDistributionConfigurations, imagebuilder:ListInfrastructureConfigurations, kafka:DescribeClusterV2, kafka:ListClustersV2, kinesisanalytics:DescribeApplication, kinesisanalytics:ListTagsForResource, quicksight:DescribeDataSource, quicksight:DescribeDataSourcePermissions, quicksight:ListTagsForResource, rekognition:DescribeStreamProcessor, rekognition:ListTagsForResource, robomaker:DescribeRobotApplication, robomaker:DescribeSimulationApplication, s3:GetStorageLensConfiguration, s3:GetStorageLensConfigurationTagging, servicediscovery:GetInstance, servicediscovery:GetNamespace, servicediscovery:GetService, servicediscovery:ListTagsForResource, ses:DescribeReceiptRule, ses:DescribeReceiptRuleSet, ses:GetContactList, ses:GetEmailTemplate, ses:GetTemplate, and sso:GetInlinePolicyForPermissionSet |
Esta política ahora admite permisos adicionales para Amazon Elastic Container Service (Amazon ECS) ElastiCache, Amazon EventBridge, Amazon FSx, Amazon Managed Service para Apache Flink, Amazon Location Service, Amazon Managed Streaming para Apache Kafka, Amazon Quick, Amazon Rekognition AWS RoboMaker, Amazon Simple Storage Service (Amazon S3), Amazon Simple Email Service (Amazon SES) AWS Amplify, AWS AppConfig, AWS AppSync, AWS Billing Conductor, AWS DataSync AWS Firewall Manager AWS Glue, AWS IAM Identity Center (IAM Identity Center), EC2 Image Builder y Elastic Load Equilibrar. |
15 de julio de 2022 |
|
AWS_ConfigRole: añadir amplifyuibuilder:ExportThemes, amplifyuibuilder:GetTheme, appconfig:GetApplication, appconfig:GetApplication, appconfig:GetConfigurationProfile, appconfig:GetConfigurationProfile, appconfig:GetDeployment, appconfig:GetDeploymentStrategy, appconfig:GetEnvironment, appconfig:GetHostedConfigurationVersion, appconfig:ListTagsForResource, appsync:GetGraphqlApi, appsync:ListGraphqlApis, billingconductor: ListPricingRulesAssociatedToPricingPlan, billingconductor:ListAccountAssociations, billingconductor:ListBillingGroups, billingconductor:ListCustomLineItems, billingconductor:ListPricingPlans, billingconductor:ListPricingRules, billingconductor:ListTagsForResource, datasync:DescribeAgent, datasync:DescribeLocationEfs, datasync:DescribeLocationFsxLustre, datasync:DescribeLocationHdfs, datasync:DescribeLocationNfs, datasync:DescribeLocationObjectStorage, datasync:DescribeLocationS3, datasync:DescribeLocationSmb, datasync:DescribeTask, datasync:ListTagsForResource, ecr:DescribePullThroughCacheRules, ecr:DescribeRegistry, ecr:GetRegistryPolicy, elasticache:DescribeCacheParameters, elasticloadbalancing:DescribeListenerCertificates, elasticloadbalancing:DescribeTargetGroupAttributes, elasticloadbalancing:DescribeTargetGroups, elasticloadbalancing:DescribeTargetHealth, events:DescribeApiDestination, events:DescribeArchive, fms:GetNotificationChannel, fms:GetPolicy, fms:ListPolicies, fms:ListTagsForResource, fsx:DescribeVolumes, geo:DescribeGeofenceCollection, geo:DescribeMap, geo:DescribePlaceIndex, geo:DescribeRouteCalculator, geo:DescribeTracker, geo:ListTrackerConsumers, glue:BatchGetJobs, glue:BatchGetWorkflows, glue:GetCrawler, glue:GetCrawlers, glue:GetJob, glue:GetJobs, glue:GetWorkflow, imagebuilder: GetComponent, imagebuilder: ListComponentBuildVersions, imagebuilder: ListComponents, imagebuilder:GetDistributionConfiguration, imagebuilder:GetInfrastructureConfiguration, imagebuilder:ListDistributionConfigurations, imagebuilder:ListInfrastructureConfigurations, kafka:DescribeClusterV2, kafka:ListClustersV2, kinesisanalytics:DescribeApplication, kinesisanalytics:ListTagsForResource, quicksight:DescribeDataSource, quicksight:DescribeDataSourcePermissions, quicksight:ListTagsForResource, rekognition:DescribeStreamProcessor, rekognition:ListTagsForResource, robomaker:DescribeRobotApplication, robomaker:DescribeSimulationApplication, s3:GetStorageLensConfiguration, s3:GetStorageLensConfigurationTagging, servicediscovery:GetInstance, servicediscovery:GetNamespace, servicediscovery:GetService, servicediscovery:ListTagsForResource, ses:DescribeReceiptRule, ses:DescribeReceiptRuleSet, ses:GetContactList, ses:GetEmailTemplate, ses:GetTemplate, and sso:GetInlinePolicyForPermissionSet |
Esta política ahora admite permisos adicionales para Amazon Elastic Container Service (Amazon ECS) ElastiCache, Amazon EventBridge, Amazon FSx, Amazon Managed Service para Apache Flink, Amazon Location Service, Amazon Managed Streaming para Apache Kafka, Amazon Quick, Amazon Rekognition AWS RoboMaker, Amazon Simple Storage Service (Amazon S3), Amazon Simple Email Service (Amazon SES) AWS Amplify, AWS AppConfig, AWS AppSync, AWS Billing Conductor, AWS DataSync AWS Firewall Manager AWS Glue, AWS IAM Identity Center (IAM Identity Center), EC2 Image Builder y Elastic Load Equilibrar. |
15 de julio de 2022 |
|
AWSConfigServiceRolePolicy: añadir athena:GetDataCatalog, athena:ListDataCatalogs, athena:ListTagsForResource, detective:ListGraphs, detective:ListTagsForResource, glue:BatchGetDevEndpoints, glue:GetDevEndpoint, glue:GetDevEndpoints, glue:GetSecurityConfiguration, glue:GetSecurityConfigurations, glue:GetTags glue:GetWorkGroup, glue:ListCrawlers, glue:ListDevEndpoints, glue:ListJobs, glue:ListMembers, glue:ListWorkflows, glue:ListWorkGroups, guardduty:GetFilter, guardduty:GetIPSet, guardduty:GetThreatIntelSet, guardduty:GetMembers, guardduty:ListFilters, guardduty:ListIPSets, guardduty:ListTagsForResource, guardduty:ListThreatIntelSets, macie:GetMacieSession, ram:GetResourceShareAssociations, ram:GetResourceShares, ses:GetConfigurationSet, ses:GetConfigurationSetEventDestinations, ses:ListConfigurationSets, sso:DescribeInstanceAccessControlAttributeConfiguration, sso:DescribePermissionSet, sso:ListManagedPoliciesInPermissionSet, sso:ListPermissionSets, and sso:ListTagsForResource |
Esta política ahora otorga permiso para obtener un catálogo de datos de Amazon Athena específico, enumerar los catálogos de datos de Athena en un Cuenta de AWS y enumerar las etiquetas asociadas a un grupo de trabajo o recurso de catálogo de datos de Athena; para obtener una lista de gráficos de comportamiento de Amazon Detective y etiquetas de lista para un gráfico de comportamiento de Detective; obtener una lista de metadatos de recursos para una lista determinada de nombres de puntos de enlace de AWS Glue desarrollo, obtener información sobre un punto final de AWS Glue desarrollo específico, obtener todos los puntos de enlace de AWS Glue
desarrollo en un Cuenta de AWS, recuperar una AWS Glue seguridad específica configuración, obtenga todas las configuraciones de AWS Glue seguridad, obtenga una lista de etiquetas asociadas a un AWS Glue recurso, obtenga información sobre un AWS Glue grupo de trabajo con el nombre especificado, recupere los nombres de todos los recursos del AWS Glue rastreador de una AWS
cuenta, obtenga los nombres de todos los AWS Glue |
31 de mayo de 2022 |
|
AWS_ConfigRole: añadir athena:GetDataCatalog, athena:ListDataCatalogs, athena:ListTagsForResource, detective:ListGraphs, detective:ListTagsForResource, glue:BatchGetDevEndpoints, glue:GetDevEndpoint, glue:GetDevEndpoints, glue:GetSecurityConfiguration, glue:GetSecurityConfigurations, glue:GetTags glue:GetWorkGroup, glue:ListCrawlers, glue:ListDevEndpoints, glue:ListJobs, glue:ListMembers, glue:ListWorkflows, glue:ListWorkGroups, guardduty:GetFilter, guardduty:GetIPSet, guardduty:GetThreatIntelSet, guardduty:GetMembers, guardduty:ListFilters, guardduty:ListIPSets, guardduty:ListTagsForResource, guardduty:ListThreatIntelSets, macie:GetMacieSession, ram:GetResourceShareAssociations, ram:GetResourceShares, ses:GetConfigurationSet, ses:GetConfigurationSetEventDestinations, ses:ListConfigurationSets, sso:DescribeInstanceAccessControlAttributeConfiguration, sso:DescribePermissionSet, sso:ListManagedPoliciesInPermissionSet, sso:ListPermissionSets, and sso:ListTagsForResource |
Esta política ahora otorga permiso para obtener un catálogo de datos de Amazon Athena específico, enumerar los catálogos de datos de Athena en un Cuenta de AWS y enumerar las etiquetas asociadas a un grupo de trabajo o recurso de catálogo de datos de Athena; para obtener una lista de gráficos de comportamiento de Amazon Detective y etiquetas de lista para un gráfico de comportamiento de Detective; obtener una lista de metadatos de recursos para una lista determinada de nombres de puntos de enlace de AWS Glue desarrollo, obtener información sobre un punto final de AWS Glue desarrollo específico, obtener todos los puntos de enlace de AWS Glue
desarrollo en un Cuenta de AWS, recuperar una seguridad específica AWS Glue configuración, obtenga todas las configuraciones de AWS Glue seguridad, obtenga una lista de etiquetas asociadas a un AWS Glue recurso, obtenga información sobre un AWS Glue grupo de trabajo con el nombre especificado, recupere los nombres de todos los recursos del AWS Glue rastreador de una AWS
cuenta, obtenga los nombres de todos los AWS Glue |
31 de mayo de 2022 |
|
AWSConfigServiceRolePolicy: añadir cloudformation:GetResource, cloudformation:ListResources, cloudtrail:GetEventDataStore, cloudtrail:ListEventDataStores, dax:DescribeParameterGroups, dax:DescribeParameters, dax:DescribeSubnetGroups, DMS:DescribeReplicationTasks, and organizations:ListPolicies |
Esta política ahora otorga permiso para obtener información sobre todos los almacenes de datos de AWS CloudTrail eventos (EDS) o sobre un recurso específico, obtener información sobre todos los recursos o sobre un AWS CloudFormation recurso específico, obtener una lista de un grupo de parámetros o grupos de subredes del Acelerador de DynamoDB (DAX), obtener información sobre AWS Database Migration Service (AWS DMS) las tareas de replicación de su cuenta en la región a la que se está accediendo actualmente y obtener una lista de todas las políticas AWS Organizations de un tipo específico. |
7 de abril de 2022 |
|
AWS_ConfigRole: añadir cloudformation:GetResource, cloudformation:ListResources, cloudtrail:GetEventDataStore, cloudtrail:ListEventDataStores, dax:DescribeParameterGroups, dax:DescribeParameters, dax:DescribeSubnetGroups, DMS:DescribeReplicationTasks, and organizations:ListPolicies |
Esta política ahora otorga permiso para obtener información sobre todos los almacenes de datos de AWS CloudTrail eventos (EDS) o sobre un recurso específico, obtener información sobre todos los recursos o sobre un AWS CloudFormation recurso específico, obtener una lista de un grupo de parámetros o grupos de subredes del Acelerador de DynamoDB (DAX), obtener información sobre AWS Database Migration Service (AWS DMS) las tareas de replicación de su cuenta en la región actual a la que se está accediendo y obtener una lista de todas las políticas AWS Organizations de un tipo específico. |
7 de abril de 2022 |
|
AWSConfigServiceRolePolicy: añadir backup-gateway:ListTagsForResource, backup-gateway:ListVirtualMachines, batch:DescribeComputeEnvironments, batch:DescribeJobQueues, batch:ListTagsForResource, dax:ListTags, dms:DescribeCertificates, dynamodb:DescribeGlobalTable, dynamodb:DescribeGlobalTableSettings, ec2:DescribeClientVpnAuthorizationRules, ec2:DescribeClientVpnEndpoints, ec2:DescribeDhcpOptions, ec2:DescribeFleets, ec2:DescribeNetworkAcls, ec2:DescribePlacementGroups, ec2:DescribeSpotFleetRequests, ec2:DescribeVolumeAttribute, ec2:DescribeVolumes, eks:DescribeFargateProfile, eks:ListFargateProfiles, eks:ListTagsForResource, fsx:ListTagsForResource, guardduty:ListOrganizationAdminAccounts, kms:ListAliases, opsworks:DescribeLayers, opsworks:DescribeStacks, opsworks:ListTags, rds:DescribeDBClusterParameterGroups, rds:DescribeDBClusterParameters, states:DescribeActivity, states:ListActivities, wafv2:GetRuleGroup, wafv2:ListRuleGroups, wafv2:ListTagsForResource, workspaces:DescribeConnectionAliases, workspaces:DescribeTags, and workspaces:DescribeWorkspaces |
Esta política ahora admite permisos adicionales para AWS Backup DynamoDB Accelerator AWS Database Migration Service, Amazon DynamoDB, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Elastic Kubernetes Service, Amazon FSx GuardDuty AWS Key Management Service AWS OpsWorks, Amazon Relational Database Service, AWS WAF V2 y Amazon WorkSpaces. AWS Batch |
14 de marzo de 2022 |
|
AWS_ConfigRole: añadir backup-gateway:ListTagsForResource, backup-gateway:ListVirtualMachines, batch:DescribeComputeEnvironments, batch:DescribeJobQueues, batch:ListTagsForResource, dax:ListTags, dms:DescribeCertificates, dynamodb:DescribeGlobalTable, dynamodb:DescribeGlobalTableSettings, ec2:DescribeClientVpnAuthorizationRules, ec2:DescribeClientVpnEndpoints, ec2:DescribeDhcpOptions, ec2:DescribeFleets, ec2:DescribeNetworkAcls, ec2:DescribePlacementGroups, ec2:DescribeSpotFleetRequests, ec2:DescribeVolumeAttribute, ec2:DescribeVolumes, eks:DescribeFargateProfile, eks:ListFargateProfiles, eks:ListTagsForResource, fsx:ListTagsForResource, guardduty:ListOrganizationAdminAccounts, kms:ListAliases, opsworks:DescribeLayers, opsworks:DescribeStacks, opsworks:ListTags, rds:DescribeDBClusterParameterGroups, rds:DescribeDBClusterParameters, states:DescribeActivity, states:ListActivities, wafv2:GetRuleGroup, wafv2:ListRuleGroups, wafv2:ListTagsForResource, workspaces:DescribeConnectionAliases, workspaces:DescribeTags, and workspaces:DescribeWorkspaces |
Esta política ahora admite permisos adicionales para AWS Backup DynamoDB Accelerator AWS Database Migration Service, Amazon DynamoDB, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Elastic Kubernetes Service, Amazon FSx GuardDuty AWS Key Management Service AWS OpsWorks, Amazon Relational Database Service, AWS WAF V2 y Amazon WorkSpaces. AWS Batch |
14 de marzo de 2022 |
|
AWSConfigServiceRolePolicy: añadir elasticbeanstalk:DescribeEnvironments, elasticbeanstalk:DescribeConfigurationSettings, account:GetAlternateContact, organizations:DescribePolicy, organizations:ListParents, organizations:ListPoliciesForTarget, es:GetCompatibleElasticsearchVersions, rds:DescribeOptionGroups, rds:DescribeOptionGroups, es:GetCompatibleVersions, codedeploy:GetDeploymentConfig, ecr-public:GetRepositoryPolicy, access-analyzer:GetArchiveRule, and ecs:ListTaskDefinitionFamilies |
Esta política ahora otorga permiso para obtener detalles sobre los entornos de Elastic Beanstalk y una descripción de los ajustes del conjunto de configuraciones de Elastic Beanstalk especificado, obtener un mapa OpenSearch o versiones de Elasticsearch, describir los grupos de opciones de Amazon RDS disponibles para una base de datos y obtener información sobre una configuración de CodeDeploy implementación. Esta política ahora también otorga permiso para recuperar el contacto alternativo especificado adjunto a una Cuenta de AWS, recuperar información sobre una AWS Organizations política, recuperar una política de repositorio de Amazon ECR, recuperar información sobre una AWS Config regla archivada, recuperar una lista de familias de definiciones de tareas de Amazon ECS, enumerar las unidades organizativas (OU) raíz o principal de la OU o cuenta secundaria especificada y enumerar las políticas que están asociadas a la raíz, unidad organizativa o cuenta de destino especificada. |
10 de febrero de 2022 |
|
AWS_ConfigRole: añadir elasticbeanstalk:DescribeEnvironments, elasticbeanstalk:DescribeConfigurationSettings, account:GetAlternateContact, organizations:DescribePolicy, organizations:ListParents, organizations:ListPoliciesForTarget, es:GetCompatibleElasticsearchVersions, rds:DescribeOptionGroups, rds:DescribeOptionGroups, es:GetCompatibleVersions, codedeploy:GetDeploymentConfig, ecr-public:GetRepositoryPolicy, access-analyzer:GetArchiveRule, and ecs:ListTaskDefinitionFamilies |
Esta política ahora otorga permiso para obtener detalles sobre los entornos de Elastic Beanstalk y una descripción de los ajustes del conjunto de configuraciones de Elastic Beanstalk especificado, obtener un mapa OpenSearch o versiones de Elasticsearch, describir los grupos de opciones de Amazon RDS disponibles para una base de datos y obtener información sobre una configuración de CodeDeploy implementación. Esta política ahora también otorga permiso para recuperar el contacto alternativo especificado adjunto a una Cuenta de AWS, recuperar información sobre una AWS Organizations política, recuperar una política de repositorio de Amazon ECR, recuperar información sobre una AWS Config regla archivada, recuperar una lista de familias de definiciones de tareas de Amazon ECS, enumerar las unidades organizativas (OU) raíz o principal de la OU o cuenta secundaria especificada y enumerar las políticas que están asociadas a la raíz, unidad organizativa o cuenta de destino especificada. |
10 de febrero de 2022 |
|
AWSConfigServiceRolePolicy: añadir logs:CreateLogStream, logs:CreateLogGroup, and logs:PutLogEvent |
Esta política ahora otorga permiso para crear grupos de CloudWatch registros y transmisiones de Amazon y para escribir registros en las transmisiones de registros creadas. |
15 de diciembre de 2021 |
|
AWS_ConfigRole: añadir logs:CreateLogStream, logs:CreateLogGroup, and logs:PutLogEvent |
Esta política ahora otorga permiso para crear grupos de CloudWatch registros y transmisiones de Amazon y para escribir registros en las transmisiones de registros creadas. |
15 de diciembre de 2021 |
|
AWSConfigServiceRolePolicy: añadir es:DescribeDomain, es:DescribeDomains, rds:DescribeDBParameters, and, elasticache:DescribeSnapshots |
Esta política ahora otorga permiso para obtener detalles sobre un servicio de Amazon ( OpenSearch OpenSearch Servicio) domain/domains y para obtener una lista detallada de parámetros para un grupo de parámetros de base de datos concreto de Amazon Relational Database Service (Amazon RDS). Esta política también otorga permiso para obtener información sobre las instantáneas de Amazon. ElastiCache |
8 de septiembre de 2021 |
|
AWS_ConfigRole: añadir es:DescribeDomain, es:DescribeDomains, rds:DescribeDBParameters, and, elasticache:DescribeSnapshots |
Esta política ahora otorga permiso para obtener detalles sobre un servicio de Amazon ( OpenSearch OpenSearch Servicio) domain/domains y para obtener una lista de parámetros detallada para un grupo de parámetros de base de datos concreto de Amazon Relational Database Service (Amazon RDS). Esta política también otorga permiso para obtener información sobre las instantáneas de Amazon. ElastiCache |
8 de septiembre de 2021 |
|
AWSConfigServiceRolePolicy— Permisos adicionales y adicionales para los tipos de recursos logs:ListTagsLogGroup, states:ListTagsForResource, states:ListStateMachines, states:DescribeStateMachine AWS |
Esta política ahora otorga permiso para enumerar las etiquetas de un grupo de registro, enumerar las etiquetas de una máquina de estado y enumerar todas las máquinas de estado. Esta política ahora otorga permiso para obtener información sobre una máquina de estado. Esta política ahora también admite permisos adicionales para Amazon EC2 Systems Manager (SSM), Amazon Elastic Container Registry, Amazon FSx, Amazon Data Firehose, Amazon Managed Streaming for Apache Kafka (Amazon MSK), Amazon Relational Database Service (Amazon RDS), Amazon Route 53, Amazon SageMaker AI, Amazon Simple Notification Service y. AWS Database Migration Service AWS Global Accelerator AWS Storage Gateway |
28 de julio de 2021 |
|
AWS_ConfigRole— Agregar l ogs:ListTagsLogGroup, states:ListTagsForResource, states:ListStateMachines, states:DescribeStateMachine y permisos adicionales para los tipos AWS de recursos |
Esta política ahora otorga permiso para enumerar las etiquetas de un grupo de registro, enumerar las etiquetas de una máquina de estado y enumerar todas las máquinas de estado. Esta política ahora otorga permiso para obtener información sobre una máquina de estado. Esta política ahora también admite permisos adicionales para Amazon EC2 Systems Manager (SSM), Amazon Elastic Container Registry, Amazon FSx, Amazon Data Firehose, Amazon Managed Streaming for Apache Kafka (Amazon MSK), Amazon Relational Database Service (Amazon RDS), Amazon Route 53, Amazon SageMaker AI, Amazon Simple Notification Service y. AWS Database Migration Service AWS Global Accelerator AWS Storage Gateway |
28 de julio de 2021 |
|
AWSConfigServiceRolePolicy— Añadir permisos adicionales para los tipos de recursos ssm:DescribeDocumentPermission AWS |
Esta política ahora otorga permiso para ver los permisos de los documentos y la información de AWS Systems Manager sobre el Analizador de acceso de IAM. Esta política ahora admite tipos de AWS recursos adicionales para Amazon Kinesis, Amazon ElastiCache, Amazon EMR AWS Network Firewall, Amazon Route 53 y Amazon Relational Database Service (Amazon RDS). Estos cambios en los permisos permiten invocar AWS Config las API de solo lectura necesarias para admitir estos tipos de recursos. Esta política ahora también permite filtrar las funciones de Lambda @Edge para la regla administrada lambda-inside-vpc. AWS Config |
8 de junio de 2021 |
|
AWS_ConfigRole— Agregar permisos adicionales para los tipos de recursos ssm:DescribeDocumentPermission AWS |
Esta política ahora otorga permiso para ver los permisos de los documentos y la información de AWS Systems Manager sobre el Analizador de acceso de IAM. Esta política ahora admite tipos de AWS recursos adicionales para Amazon Kinesis, Amazon ElastiCache, Amazon EMR AWS Network Firewall, Amazon Route 53 y Amazon Relational Database Service (Amazon RDS). Estos cambios en los permisos permiten invocar AWS Config las API de solo lectura necesarias para admitir estos tipos de recursos. Esta política ahora también permite filtrar las funciones de Lambda @Edge para la regla administrada lambda-inside-vpc. AWS Config |
8 de junio de 2021 |
|
AWSConfigServiceRolePolicy: añadir el permiso apigateway:GET para realizar llamadas GET de solo lectura a la API Gateway y el permiso s3:GetAccessPointPolicy y el permiso s3:GetAccessPointPolicyStatus para invocar las API de solo lectura de Amazon S3 |
Esta política ahora otorga permisos que permiten realizar llamadas GET de solo lectura AWS Config a API Gateway para respaldar una regla para API Gateway. AWS Config La política también añade permisos que permiten invocar AWS Config las API de solo lectura de Amazon Simple Storage Service (Amazon S3), que son necesarias para admitir el nuevo tipo de recurso. |
10 de mayo de 2021 |
|
AWS_ ConfigRole: añada el apigateway:GET permiso para realizar llamadas GET de solo lectura a API Gateway y el permiso y el s3:GetAccessPointPolicy permiso para invocar las API de solo lectura de Amazon S3 s3:GetAccessPointPolicyStatus |
Esta política ahora otorga permisos que permiten realizar llamadas GET de solo lectura AWS Config a API Gateway para dar soporte a API Gateway. AWS Config La política también añade permisos que permiten invocar AWS Config las API de solo lectura de Amazon Simple Storage Service (Amazon S3), que son necesarias para admitir el nuevo tipo de recurso. |
10 de mayo de 2021 |
|
AWSConfigServiceRolePolicy— Añadir ssm:ListDocuments permisos y permisos adicionales para los tipos de recursos AWS |
Esta política ahora otorga permisos para ver información sobre los documentos específicos de AWS Systems Manager . Esta política ahora también admite tipos de AWS recursos adicionales para AWS Backup Amazon Elastic File System, Amazon ElastiCache, Amazon Simple Storage Service (Amazon S3), Amazon Elastic Compute Cloud (Amazon EC2), Amazon Kinesis, Amazon SageMaker AI y Amazon Route 53. AWS Database Migration Service Estos cambios en los permisos AWS Config permiten invocar las API de solo lectura necesarias para admitir estos tipos de recursos. |
1 de abril de 2021 |
|
AWS_ConfigRole— Añadir ssm:ListDocuments permisos y permisos adicionales para los tipos de recursos AWS |
Esta política ahora otorga permisos para ver información sobre los documentos específicos de AWS Systems Manager . Esta política ahora también admite tipos de AWS recursos adicionales para AWS Backup Amazon Elastic File System, Amazon ElastiCache, Amazon Simple Storage Service (Amazon S3), Amazon Elastic Compute Cloud (Amazon EC2), Amazon Kinesis, Amazon SageMaker AI y Amazon Route 53. AWS Database Migration Service Estos cambios en los permisos AWS Config permiten invocar las API de solo lectura necesarias para admitir estos tipos de recursos. |
1 de abril de 2021 |
|
|
|
1 de abril de 2021 |
|
AWS Config comenzó a rastrear los cambios |
AWS Config comenzó a rastrear los cambios de sus políticas AWS administradas. |
1 de abril de 2021 |
