Le traduzioni sono generate tramite traduzione automatica. In caso di conflitto tra il contenuto di una traduzione e la versione originale in Inglese, quest'ultima prevarrà.
AWS politiche gestite per AWS Config
Una policy AWS gestita è una policy autonoma creata e amministrata da AWS. AWS le policy gestite sono progettate per fornire autorizzazioni per molti casi d'uso comuni in modo da poter iniziare ad assegnare autorizzazioni a utenti, gruppi e ruoli.
Tieni presente che le policy AWS gestite potrebbero non concedere autorizzazioni con privilegi minimi per i tuoi casi d'uso specifici perché sono disponibili per tutti i clienti. AWS Si consiglia pertanto di ridurre ulteriormente le autorizzazioni definendo policy gestite dal cliente specifiche per i propri casi d’uso.
Non è possibile modificare le autorizzazioni definite nelle politiche gestite. AWS Se AWS aggiorna le autorizzazioni definite in una policy AWS gestita, l'aggiornamento ha effetto su tutte le identità principali (utenti, gruppi e ruoli) a cui la policy è associata. AWS è più probabile che aggiorni una policy AWS gestita quando ne Servizio AWS viene lanciata una nuova o diventano disponibili nuove operazioni API per i servizi esistenti.
Per ulteriori informazioni, consultare Policy gestite da AWS nella Guida per l’utente di IAM.
AWS politica gestita: AWSConfigServiceRolePolicy
AWS Config utilizza il ruolo collegato al servizio denominato AWSServiceRoleForConfig per chiamare altri AWS servizi per conto dell'utente. Quando si utilizza Console di gestione AWS per configurare AWS Config, questa reflex viene creata automaticamente AWS Config se si seleziona l'opzione per utilizzare la AWS Config reflex anziché il proprio ruolo di servizio AWS Identity and Access Management (IAM).
L'SLR AWSServiceRoleForConfig contiene la policy gestita AWSConfigServiceRolePolicy. Questa policy gestita contiene autorizzazioni di sola lettura e sola scrittura per le risorse e autorizzazioni di sola lettura per AWS Config le risorse in altri servizi che supporta. AWS Config La policy fornisce un accesso completo per monitorare e registrare le modifiche alla configurazione nell' AWS infrastruttura, comprese le autorizzazioni per oltre 100 AWS servizi come servizi di elaborazione, archiviazione, rete, sicurezza, analisi e machine learning.
La policy include le autorizzazioni per le seguenti categorie di servizi:
-
access-analyzer— Consente ai responsabili di analizzare i modelli di accesso e recuperare i risultati di sicurezza. -
account— Consente ai titolari di recuperare le informazioni di contatto dell'account. -
acmeacm-pca— Consente ai committenti di gestire i SSL/TLS certificati e le autorità di certificazione private. -
airflow— Consente ai principali di monitorare gli ambienti Apache Airflow gestiti. -
amplifyeamplifyuibuilder— Consente ai principali di monitorare le applicazioni web e i componenti dell'interfaccia utente. -
aoss— Consente ai principali di monitorare le raccolte OpenSearch Serverless e le configurazioni di sicurezza. -
app-integrations— Consente ai principali di monitorare le configurazioni di integrazione delle applicazioni. -
appconfig— Consente ai principali di monitorare le implementazioni della configurazione delle applicazioni. -
appflow— Consente ai principali di monitorare le configurazioni del flusso di dati tra le applicazioni. -
application-autoscalingeapplication-signals: consente ai responsabili di monitorare le politiche di scalabilità automatica e le metriche delle prestazioni delle applicazioni. -
appmesh— Consente ai principali di monitorare le configurazioni delle service mesh. -
apprunner— Consente ai principali di monitorare applicazioni e servizi web containerizzati. -
appstream— Consente ai principali di monitorare le configurazioni di streaming delle applicazioni. -
appsync— Consente ai principali di monitorare le configurazioni delle API GraphQL. -
aps— Consente ai principali di monitorare le configurazioni di monitoraggio di Prometheus. -
apptest— Consente ai principali di monitorare le configurazioni di test delle applicazioni. -
arc-zonal-shift— Consente ai responsabili di monitorare la disponibilità delle configurazioni dei turni zonali. -
athena— Consente ai responsabili di monitorare le configurazioni dei motori di interrogazione e i cataloghi di dati. -
auditmanager— Consente ai responsabili di monitorare le verifiche e le valutazioni della conformità. -
autoscalingeautoscaling-plans— Consente ai presidi di monitorare i gruppi e i piani di scalabilità automatica. -
b2bi— Consente ai responsabili di monitorare le configurazioni di integrazione business-to-business. -
backupebackup-gateway: consente ai responsabili di monitorare le politiche di backup e le configurazioni dei gateway. -
batch— Consente ai responsabili di monitorare gli ambienti di elaborazione in batch e le code di lavoro. -
bcm-data-exports— Consente ai committenti di monitorare le esportazioni dei dati di fatturazione e gestione dei costi. -
bedrockebedrock-agentcore— Consente ai principali di monitorare i modelli di base e le configurazioni degli agenti di intelligenza artificiale. -
billingconductor— Consente ai committenti di monitorare le configurazioni dei gruppi di fatturazione. -
budgets— Consente ai principali di monitorare le configurazioni e le azioni del budget. -
cassandra— Consente ai principali di interrogare le configurazioni gestite del database Cassandra. -
ce— Consente ai principali di monitorare le configurazioni dei report su costi e utilizzo. -
cleanroomsecleanrooms-ml— Consente ai responsabili di monitorare la collaborazione dei dati e le configurazioni di apprendimento automatico. -
cloud9— Consente ai responsabili di monitorare le configurazioni dell'ambiente di sviluppo cloud. -
cloudformation— Consente ai principali di monitorare l'infrastruttura sotto forma di configurazioni dello stack di codice. -
cloudfront— Consente ai responsabili di monitorare le configurazioni della rete di distribuzione dei contenuti. -
cloudtrail— Consente ai principali di monitorare la registrazione delle API e le configurazioni dell'audit trail. -
cloudwatch— Consente ai responsabili di monitorare metriche, allarmi e configurazioni del dashboard. -
codeartifact— Consente ai principali di monitorare le configurazioni degli archivi dei pacchetti software. -
codebuild— Consente ai responsabili di monitorare le configurazioni dei progetti di compilazione. -
codecommit— Consente ai responsabili di monitorare le configurazioni del repository del codice sorgente. -
codeconnections— Consente ai principali di monitorare le connessioni a sorgenti di terze parti. -
codedeploy— Consente ai principali di monitorare le configurazioni di distribuzione delle applicazioni. -
codeguru-profilerecodeguru-reviewer— Consente ai principali di monitorare l'analisi del codice e le configurazioni di profilazione. -
codepipeline— Consente ai principali di monitorare le configurazioni della pipeline di integrazione e distribuzione continue. -
codestar-connections— Consente ai responsabili di monitorare le connessioni agli strumenti di sviluppo. -
cognito-identityecognito-idp— Consente ai principali di monitorare le configurazioni delle identità e del pool di utenti. -
comprehend— Consente ai principali di monitorare le configurazioni di elaborazione del linguaggio naturale. -
config— Consente ai responsabili di gestire la registrazione della configurazione e il monitoraggio della conformità. -
connect— Consente ai responsabili di monitorare le configurazioni dei contact center.
Per ulteriori informazioni sui tipi di risorse supportati, vedere Tipi di risorse supportati per AWS Config e. Utilizzo Service-Linked dei ruoli per AWS Config
Per visualizzare ulteriori dettagli sulla policy, inclusa la versione più recente del documento di policy JSON, consulta AWSConfigServiceRolePolicy nella Guida di riferimento alle policy gestite da AWS .
Consigliato: utilizza il Service-linked ruolo
Si consiglia di utilizzare il ruolo collegato al servizio a meno che non si abbia un caso d'uso particolare. Un ruolo collegato al servizio aggiunge tutte le autorizzazioni necessarie per AWS Config l'esecuzione prevista. Alcune funzionalità, come i registratori di configurazione collegati ai servizi, richiedono l'utilizzo del ruolo collegato al servizio.
AWS politica gestita: AWS_ ConfigRole
Per registrare le configurazioni AWS delle risorse, sono AWS Config necessarie le autorizzazioni IAM per ottenere i dettagli di configurazione sulle risorse. Se desideri creare un ruolo IAM per AWS Config, puoi utilizzare la policy gestita AWS_ConfigRole e collegarla al ruolo IAM.
Questa policy IAM viene aggiornata ogni volta che AWS Config aggiunge il supporto per un tipo di AWS risorsa. Ciò significa che AWS Config continuerà ad avere le autorizzazioni necessarie per registrare i dati di configurazione dei tipi di risorse supportati purché al ConfigRole ruolo AWS_ sia associata questa policy gestita. La policy fornisce un accesso completo per monitorare e registrare le modifiche alla configurazione nell' AWS infrastruttura, comprese le autorizzazioni per oltre 100 AWS servizi come servizi di elaborazione, archiviazione, rete, sicurezza, analisi e machine learning. Per ulteriori informazioni, consultare Tipi di risorse supportati per AWS Config e Autorizzazioni per il ruolo IAM assegnato a AWS Config.
Per visualizzare maggiori dettagli sulla policy, inclusa la versione più recente del documento sulla policy JSON, consulta AWS_ ConfigRole nella Managed Policy Reference Guide. AWS
AWS policy gestita: AWSConfigUserAccess
Questa policy IAM fornisce l'accesso all'uso AWS Config, inclusa la ricerca per tag nelle risorse e la lettura di tutti i tag. Ciò non fornisce l'autorizzazione alla configurazione AWS Config, che richiede privilegi amministrativi.
Visualizza la politica: AWSConfigUserAccess.
AWS politica gestita: ConfigConformsServiceRolePolicy
Per distribuire e gestire i pacchetti di conformità, sono AWS Config necessarie le autorizzazioni IAM e alcune autorizzazioni di altri servizi. AWS Questi consentono di distribuire e gestire i pacchetti di conformità con funzionalità complete e vengono aggiornati ogni volta che vengono aggiunte nuove funzionalità per i pacchetti di conformità. AWS Config Per ulteriori informazioni sui pacchetti di conformità, consulta Pacchetti di conformità.
Visualizza la policy:. ConfigConformsServiceRolePolicy
AWS politica gestita: AWSConfigRulesExecutionRole
Per implementare le regole Lambda AWS personalizzate, sono AWS Config necessarie le autorizzazioni IAM e alcune autorizzazioni di altri servizi. AWS Questi consentono alle AWS Lambda funzioni di accedere all' AWS Config API e agli snapshot di configurazione che vengono AWS Config distribuiti periodicamente ad Amazon S3. Questo accesso è richiesto dalle funzioni che valutano le modifiche alla configurazione per le regole Lambda AWS personalizzate e viene aggiornato ogni volta che AWS Config aggiunge nuove funzionalità. Per ulteriori informazioni sulle regole Lambda AWS personalizzate, vedere Creazione di regole Lambda AWS Config personalizzate. Per ulteriori informazioni sugli snapshot di configurazione, consulta Concetti | Snapshot di configurazione. Per ulteriori informazioni sulla distribuzione degli snapshot di configurazione, consulta Gestione del canale di distribuzione.
Visualizza la policy:. AWSConfigRulesExecutionRole
AWS politica gestita: AWSConfigMultiAccountSetupPolicy
Per distribuire, aggiornare ed eliminare centralmente AWS Config regole e pacchetti di conformità tra gli account dei membri di un'organizzazione in AWS Organizations, sono AWS Config necessarie le autorizzazioni IAM e determinate autorizzazioni di altri servizi. AWS Questa policy gestita viene aggiornata ogni volta che AWS Config aggiunge nuove funzionalità per la configurazione di più account. Per ulteriori informazioni, consulta Gestione delle AWS Config regole su tutti gli account dell'organizzazione e Gestione dei pacchetti di conformità su tutti gli account dell'organizzazione.
Visualizza la politica:. AWSConfigMultiAccountSetupPolicy
AWS politica gestita: AWSConfigRoleForOrganizations
Per consentire di AWS Config chiamare AWS Organizations API di sola lettura, sono AWS Config necessarie le autorizzazioni IAM e alcune autorizzazioni di altri servizi. AWS Questa policy gestita viene aggiornata ogni volta che AWS Config aggiunge nuove funzionalità per la configurazione di più account. Per ulteriori informazioni, consulta Gestione delle AWS Config regole su tutti gli account dell'organizzazione e Gestione dei pacchetti di conformità su tutti gli account dell'organizzazione.
Visualizza la politica:. AWSConfigRoleForOrganizations
AWS politica gestita: AWSConfigRemediationServiceRolePolicy
AWS Config Per consentire la riparazione NON_COMPLIANT delle risorse per tuo conto, sono AWS Config
necessarie le autorizzazioni IAM e alcune autorizzazioni di altri servizi. AWS Questa policy gestita viene aggiornata ogni volta che AWS Config aggiunge nuove funzionalità per la correzione. Per ulteriori informazioni sulla correzione, vedere Riparazione delle risorse non conformi con regole. AWS Config Per ulteriori informazioni sulle condizioni che danno origine ai possibili risultati della AWS Config valutazione, consulta Concepts | Rules. AWS Config
Visualizza la politica: AWSConfigRemediationServiceRolePolicy.
AWS Config aggiornamenti a AWS policy gestite
Visualizza i dettagli sugli aggiornamenti alle policy AWS gestite da AWS Config quando questo servizio ha iniziato a tracciare queste modifiche. Per ricevere avvisi automatici sulle modifiche apportate a questa pagina, iscriviti al feed RSS nella pagina Cronologia dei AWS Config documenti.
| Modifica | Descrizione | Data |
|---|---|---|
|
AWSConfigServiceRolePolicy— Permessi aggiunti: access-analyzer:, access-analyzer:CheckNoPublicAccess, bedrock:, bedrock-agentcore:ValidatePolicy, bedrock-agentcore:ListEnforcedGuardrailsConfiguration, bedrock-agentcore:GetPaymentManager, bedrock-agentcore:, bedrock-agentcore:GetPolicyEngineSummary, bedrock-agentcore:, notifiche:, notifiche:GetPolicySummary, nova-act:, nova-act:, nova-act:ListPaymentManagers, s3vectors:, s3vectors:ListPolicyEngineSummaries, s3vectors:, s3vectors:, s3vectors:ListPolicySummaries, salvia:ListNotificationConfigurations, salvia:ListTagsForResource, salvia:, salvia:GetWorkflowDefinition, salvia:, ListWorkflowDefinitions GetIndex ListIndexes DescribeAlgorithm DescribeClusterSchedulerConfig DescribeFlowDefinition DescribeHumanTaskUi sagomatore:DescribeLabelingJob, salvia:DescribeMlflowApp, salvia:, salvia:DescribeOptimizationJob, salvia:DescribeTrainingJob, salvia:ListAlgorithms, salvia:ListClusterSchedulerConfigs, salvia:, salvia:ListFlowDefinitions, salvia:ListHumanTaskUis, salvia:ListLabelingJobs, salvia:ListMlflowApps, salvia:, salvia:ListOptimizationJobs, salvia:ListTrainingJobs. |
Questa politica ora supporta autorizzazioni AWS aggiuntive per la registrazione delle modifiche alla configurazione in numerosi servizi. |
1 agosto 2026 |
|
AWS_ConfigRole— Permessi aggiunti: access-analyzer:, access-analyzer:CheckNoPublicAccess, bedrock:, bedrock-agentcore:, bedrock-agentcore:ValidatePolicy, bedrock-agentcore:ListEnforcedGuardrailsConfiguration, bedrock-agentcore:, bedrock-agentcore:GetPaymentManager, bedrock-agentcore:, notifiche:, notifiche:GetPolicyEngineSummary, nova-act:, nova-act:, nova-act:, s3vectors:GetPolicySummary, s3vectors:, s3vectors:, s3vectors:ListPaymentManagers, s3vectors:, salvia:, salvia:ListPolicyEngineSummaries, salvia:, salvia:, salvia:, ListPolicySummaries ListNotificationConfigurations ListTagsForResource GetWorkflowDefinition ListWorkflowDefinitions GetIndex ListIndexes DescribeAlgorithm DescribeClusterSchedulerConfig DescribeFlowDefinition DescribeHumanTaskUi sagomatore:DescribeLabelingJob, salvia:DescribeMlflowApp, salvia:, salvia:DescribeOptimizationJob, salvia:DescribeTrainingJob, salvia:ListAlgorithms, salvia:ListClusterSchedulerConfigs, salvia:, salvia:ListFlowDefinitions, salvia:ListHumanTaskUis, salvia:ListLabelingJobs, salvia:ListMlflowApps, salvia:, salvia:ListOptimizationJobs, salvia:ListTrainingJobs. |
Questa politica ora supporta autorizzazioni AWS aggiuntive per la registrazione delle modifiche alla configurazione in numerosi servizi. |
1 agosto 2026 |
|
AWSConfigServiceRolePolicy— Permessi aggiunti: bedrock:, bedrock:, bedrock:GetAutomatedReasoningPolicy, bedrock:, bedrock:, bedrock:GetBlueprint, bedrock:, bedrock-agentcore:GetFoundationModel, bedrock-agentcore:GetPromptRouter, bedrock-agentcore:ListAutomatedReasoningPolicies, bedrock-agentcore:ListBlueprints, bedrock-agentcore:, bedrock-agentcore:ListFoundationModels, bedrock-agentcore:GetApiKeyCredentialProvider, bedrock-agentcore:, cloudtrail:, cloudtrail:, cloudtrail:, cloudtrail:GetOauth2CredentialProvider, cloudtrail:, cloudtrail: orologio:, connessione:GetPolicy, dynamodb:, dynamodb:, dynamodb:, dynamodb:GetTokenVault, ListApiKeyCredentialProviders ListOauth2CredentialProviders ListPolicies GetTrail ListManagedInsightRules ListQueueEmailAddresses DescribeContributorInsights DescribeKinesisStreamingDestination GetResourcePolicy elasticloadbalancing:DescribeCapacityReservation, lambda:GetFunctionRecursionConfig, lambda:GetFunctionScalingConfig, license-manager:ListTagsForResource, redshift:DescribeClusterDbRevisions, redshift: DescribeSnapshotCopyGrantsGetBucketMetadataTableConfiguration, s3:GetBucketOwnershipControls, s3:, s3express: GetMetricsConfigurationDescribeAction, sagemaker:DescribeArtifact, sagemaker:DescribeAutoMLJob, sagemaker:DescribeContext, sagemaker:DescribeExperiment, sagemaker:DescribeHub, sagemaker:DescribeModelCardExportJob, sagemaker:DescribeTrial, sagemaker:DescribeTrialComponent, sagemaker:DescribeWorkforce, sagemaker: ListActions salvia:ListArtifacts, salvia:ListContexts, salvia:, salvia:ListExperiments, salvia: ListHubs salvia:ListModelCardExportJobs, salvia:ListMonitoringAlerts, salvia:ListTrialComponents, salvia:ListTrials, salvia:ListWorkforces. |
Questa politica ora supporta autorizzazioni aggiuntive per la registrazione delle modifiche alla configurazione in numerosi servizi. AWS |
5 maggio 2026 |
|
AWS_ConfigRole— Permessi aggiunti: bedrock:, bedrock:, bedrock:GetAutomatedReasoningPolicy, bedrock:, bedrock:GetBlueprint, bedrock:, bedrock:, bedrock-agentcore:GetFoundationModel, bedrock-agentcore:GetPromptRouter, bedrock-agentcore:ListAutomatedReasoningPolicies, bedrock-agentcore:ListBlueprints, bedrock-agentcore:ListFoundationModels, bedrock-agentcore:, bedrock-agentcore:GetApiKeyCredentialProvider, bedrock-agentcore:, cloudtrail:, cloudtrail:GetOauth2CredentialProvider, cloudtrail:, cloudtrail:, cloudtrail:GetPolicy, cloudtrail: orologio:, connessione:, dynamodb:, dynamodb:GetTokenVault, dynamodb:, dynamodb:, ListApiKeyCredentialProviders ListOauth2CredentialProviders ListPolicies GetTrail ListManagedInsightRules ListQueueEmailAddresses DescribeContributorInsights DescribeKinesisStreamingDestination GetResourcePolicy elasticloadbalancing:DescribeCapacityReservation, lambda:GetFunctionRecursionConfig, lambda:GetFunctionScalingConfig, license-manager:ListTagsForResource, redshift:DescribeClusterDbRevisions, redshift: DescribeSnapshotCopyGrantsGetBucketMetadataTableConfiguration, s3:GetBucketOwnershipControls, s3:, s3express: GetMetricsConfigurationDescribeAction, sagemaker:DescribeArtifact, sagemaker:DescribeAutoMLJob, sagemaker:DescribeContext, sagemaker:DescribeExperiment, sagemaker:DescribeHub, sagemaker:DescribeModelCardExportJob, sagemaker:DescribeTrial, sagemaker:DescribeTrialComponent, sagemaker:DescribeWorkforce, sagemaker: ListActions salvia:ListArtifacts, salvia:ListContexts, salvia:, salvia:ListExperiments, salvia: ListHubs salvia:ListModelCardExportJobs, salvia:ListMonitoringAlerts, salvia:ListTrialComponents, salvia:ListTrials, salvia:ListWorkforces. |
Questa politica ora supporta autorizzazioni aggiuntive per la registrazione delle modifiche alla configurazione in numerosi servizi. AWS |
5 maggio 2026 |
|
AWSConfigServiceRolePolicy— Permessi aggiunti: auditmanager:, auditmanager:, auditmanager:GetAssessmentFramework, auditmanager:, bcm-dashboards:GetControl, bcm-dashboards:ListAssessmentFrameworks, bcm-dashboards:ListControls, bcm-dashboards:, bedrock:GetDashboard, bedrock-agentcore:, bedrock-agentcore:ListDashboards, bedrock-agentcore:, bedrock-agentcore:ListTagsForResource, bedrock-agentcore:GetEvaluationJob, bedrock-agentcore:ListEvaluationJobs, bedrock-agentcore:, bedrock-agentcore: core:GetEvaluator, carillon:, carillon:, rintocco:GetOnlineEvaluationConfig, dms:, emr- GetPolicyEngine ListEvaluators ListOnlineEvaluationConfigs ListPolicyEngines DescribeAppInstance ListAppInstances ListTagsForResource ListInstanceProfiles contenitori:DescribeManagedEndpoint, emr-containers:ListTagsForResource, gameliftstreams:GetApplication, gameliftstreams:GetStreamGroup, gameliftstreams:ListApplications, gameliftstreams:ListStreamGroups, gameliftstreams:ListTagsForResource, globalaccelerator:DescribeAcceleratorAttributes, glue:GetCatalog, glue:GetCatalogs, glue:GetSession, glue:ListSessions, lambda:ListCapacityProviders, medialive:DescribeNode, medialive:ListNodes, mediapackagev2:GetChannelPolicy, mediapackagev2:GetOriginEndpointPolicy, outposts:GetSite, avamposti:ListSites, qbusiness:GetPolicy, redshift:DescribeDataShares, rtbfabric:GetInboundExternalLink, rtbfabric: GetLink, rtbfabric:GetOutboundExternalLink, rtbfabric:, rtbfabric:GetRequesterGateway, rtbfabric:GetResponderGateway, rtbfabric:ListLinks, rtbfabric:ListRequesterGateways, rtbfabric:, s3express:ListResponderGateways, s3express:ListTagsForResource, s3express:GetAccessPoint, s3express:, s3express:GetAccessPointPolicy, s3vettori:GetAccessPointScope, s3 vettori:ListAccessPointsForDirectoryBuckets, s3 vettori:ListTagsForResource, s3 vettori:GetVectorBucket, sagemaker:, sagemaker:GetVectorBucketPolicy, sagemaker:ListTagsForResource, sagemaker:, sagemaker:ListVectorBuckets, sagemaker:DescribeAutoMLJobV2, sagemaker:DescribeHyperParameterTuningJob, sagemaker:, sagemaker:DescribePartnerApp, sagemaker:ListAutoMLJobs, sagemaker:ListHyperParameterTuningJobs, sagemaker:, sagemaker:ListPartnerApps, service catalog:, service catalog:DescribeTagOption, servicecatalog:ListTagOptions, ssm-contacts:GetRotation, ssm-contact:ListRotations, ssm-guiconnect:GetConnectionRecordingPreferences, sso:GetPermissionsBoundaryForPermissionSet, sso:, textract:ListCustomerManagedPolicyReferencesInPermissionSet, textract:GetAdapter, textract:ListAdapters, transfer:ListTagsForResource, transfer:DescribeWebApp, transfer:DescribeWebAppCustomization, transfer:ListWebApps, wisdom:getAiguardRail, Wisdom:listAiguardRails. |
Questa policy ora supporta autorizzazioni aggiuntive per la registrazione delle modifiche alla configurazione in numerosi servizi. AWS |
10 marzo 2026 |
|
AWS_ConfigRole— Permessi aggiunti: auditmanager:, auditmanager:, auditmanager:GetAssessmentFramework, auditmanager:, bcm-dashboards:GetControl, bcm-dashboards:ListAssessmentFrameworks, bcm-dashboards:ListControls, bcm-dashboards:, bedrock:GetDashboard, bedrock-agentcore:, bedrock-agentcore:ListDashboards, bedrock-agentcore:, bedrock-agentcore:ListTagsForResource, bedrock-agentcore:GetEvaluationJob, bedrock-agentcore:ListEvaluationJobs, bedrock-agentcore:, bedrock-agentcore: core:GetEvaluator, carillon:, carillon:, rintocco:GetOnlineEvaluationConfig, dms:, emr- GetPolicyEngine ListEvaluators ListOnlineEvaluationConfigs ListPolicyEngines DescribeAppInstance ListAppInstances ListTagsForResource ListInstanceProfiles contenitori:DescribeManagedEndpoint, emr-containers:ListTagsForResource, gameliftstreams:GetApplication, gameliftstreams:GetStreamGroup, gameliftstreams:ListApplications, gameliftstreams:ListStreamGroups, gameliftstreams:ListTagsForResource, globalaccelerator:DescribeAcceleratorAttributes, glue:GetCatalog, glue:GetCatalogs, glue:GetSession, glue:ListSessions, lambda:ListCapacityProviders, medialive:DescribeNode, medialive:ListNodes, mediapackagev2:GetChannelPolicy, mediapackagev2:GetOriginEndpointPolicy, outposts:GetSite, avamposti:ListSites, qbusiness:GetPolicy, redshift:DescribeDataShares, rtbfabric:GetInboundExternalLink, rtbfabric: GetLink, rtbfabric:GetOutboundExternalLink, rtbfabric:, rtbfabric:GetRequesterGateway, rtbfabric:GetResponderGateway, rtbfabric:ListLinks, rtbfabric:ListRequesterGateways, rtbfabric:, s3express:ListResponderGateways, s3express:ListTagsForResource, s3express:GetAccessPoint, s3express:, s3express:GetAccessPointPolicy, s3vettori:GetAccessPointScope, s3 vettori:ListAccessPointsForDirectoryBuckets, s3 vettori:ListTagsForResource, s3 vettori:GetVectorBucket, sagemaker:, sagemaker:GetVectorBucketPolicy, sagemaker:ListTagsForResource, sagemaker:, sagemaker:ListVectorBuckets, sagemaker:DescribeAutoMLJobV2, sagemaker:DescribeHyperParameterTuningJob, sagemaker:, sagemaker:DescribePartnerApp, sagemaker:ListAutoMLJobs, sagemaker:ListHyperParameterTuningJobs, sagemaker:, sagemaker:ListPartnerApps, service catalog:, service catalog:DescribeTagOption, servicecatalog:ListTagOptions, ssm-contacts:GetRotation, ssm-contact:ListRotations, ssm-guiconnect:GetConnectionRecordingPreferences, sso:GetPermissionsBoundaryForPermissionSet, sso:, textract:ListCustomerManagedPolicyReferencesInPermissionSet, textract:GetAdapter, textract:ListAdapters, transfer:ListTagsForResource, transfer:DescribeWebApp, transfer:DescribeWebAppCustomization, transfer:ListWebApps, wisdom:getAiguardRail, Wisdom:listAiguardRails. |
Questa policy ora supporta autorizzazioni aggiuntive per la registrazione delle modifiche alla configurazione in numerosi servizi. AWS |
10 marzo 2026 |
|
AWSConfigServiceRolePolicy— Permessi aggiunti: application-autoscaling:DescribeScheduledActions, appsync:, cloudformation:, cloudformation:, cloudformation:GetApiAssociation, cloudfront:, cloudfront:DescribeStacks, cloudfront:, connect:, cur:GetStackPolicy, cur:, datazone:GetTemplate, datazone:, datazone:GetKeyGroup, datazone:, datazone:GetMonitoringSubscription, datazone:, datazone:ListKeyGroups, datazone:ListEvaluationFormVersions, datazone:DescribeReportDefinitions, datazone:, datazone:ListTagsForResource, datazone:GetDomainUnit, datazone:, datazone: zona dati:GetEnvironmentAction, zona dati:, zona dati:GetEnvironmentBlueprintConfiguration, zona dati: GetEnvironmentProfile GetGroupProfile GetSubscriptionTarget GetUserProfile ListDomainUnitsForParent ListEntityOwners ListEnvironmentActions ListEnvironmentBlueprintConfigurations, zona dati:, zona dati:ListEnvironmentProfiles, zona dati:, zona dati:, zona dati:ListPolicyGrants, zona dati:, docdb-elastic:ListProjectMemberships, docdb-elastic:ListSubscriptionTargets, docdb-elastic:, docdb-elastic:SearchGroupProfiles, ec2:, ec2:SearchUserProfiles, fis:, frauddetector:GetCluster, frauddetector:, guardduty:, guardduty:ListClusters, guardduty:, guardduty:, guardduty:ListTagsForResource, guardduty:GetRouteServerAssociations, guardduty:, guardduty:GetRouteServerPropagations, guardduty:, guardduty:SearchTransitGatewayRoutes, guardduty:, guardduty:ListTagsForResource, guardduty:, guardduty:GetListElements, guardduty:, guardduty:, guardduty:GetListsMetadata, guardduty:GetThreatEntitySet, guardduty:, guardduty:GetTrustedEntitySet, guardduty:, guardduty:ListThreatEntitySets, guardduty:, guardduty:ListTrustedEntitySets, guardduty:, guardduty:, guardduty:GetCampaign, guardduty:, guardduty:, guardduty:ListCampaigns, iotfleetwise:, iotsitewise:DescribeComputationModel, iotsitewise:, iotsitewise:DescribeDataset, iotsitewise:ListComputationModels, iotsitewise:, iotwireless:, iotwireless:ListDatasets, kendra:, logs:, logs:GetWirelessDeviceImportTask, log:, mediaconnect:ListWirelessDeviceImportTasks, medialive:, medialive:, medialive:ListDataSources, medialive:DescribeQueryDefinitions, medialive:GetIntegration, medialive:, medialive:ListIntegrations, medialive:, medialive:, medialive:ListRouterOutputs, medialive:DescribeMultiplex, medialive:, medialive:DescribeSdiSource, medialive:, medialive:GetCloudWatchAlarmTemplate, medialive:, medialive:GetCloudWatchAlarmTemplateGroup, medialive:, medialive:GetEventBridgeRuleTemplate, medialive:, medialive:GetEventBridgeRuleTemplateGroup, medialive:, medialive:ListCloudWatchAlarmTemplateGroups, medialive:, medialive:ListCloudWatchAlarmTemplates, medialive:, medialive:ListEventBridgeRuleTemplateGroups, medialive:, medialive:ListEventBridgeRuleTemplates, medialive:ListSdiSources, medialive:, medialive:ListSignalMaps, medialive:, medialive:, medialive:GetConnectAttachment, medialive:, medialive::GetCoreNetwork, gestore di rete:, gestore di rete: GetCoreNetworkPolicy, network manager:GetDirectConnectGatewayAttachment, networkmanager:GetSiteToSiteVpnAttachment, networkmanager:ListAttachments, networkmanager:ListCoreNetworks, notifiche:, notifiche:GetEventRule, notifiche:ListEventRules, notifiche:ListManagedNotificationChannelAssociations, notifiche:ListNotificationHubs, refactor-spaces:ListOrganizationalUnits, refactor-spaces:GetApplication, refactor-spaces: GetRouteListRoutes, resource-explorer-2:GetDefaultView, route53resolver:, route53resolver:GetOutpostResolver, securityhub:ListOutpostResolvers, securityhub: V2DescribeOrganizationConfiguration, securityhub: GetAggregator V2, securityhub:GetAutomationRuleV2, hub di sicurezza:GetConfigurationPolicyAssociation, hub di sicurezza:GetFindingAggregator, hub di sicurezza: ListAggregators V2, hub di sicurezza:ListAutomationRulesV2, hub di sicurezza:ListConfigurationPolicyAssociations, sms-voce:ListFindingAggregators, sms-voce:DescribeConfigurationSets, sms-voce:DescribeKeywords, sms-voce:DescribeProtectConfigurations, sms-voce:, sms-voce:GetProtectConfigurationCountryRuleSet, sms-voce:ListPoolOriginationIdentities, sms-voce:ListTagsForResource, spazi di lavoro web:GetTrustStore, spazi di lavoro web:GetTrustStoreCertificate, spazi di lavoro web:GetUserAccessLoggingSettings, spazi di lavoro web:ListTagsForResource. |
Questa policy ora supporta autorizzazioni aggiuntive per la registrazione delle modifiche alla configurazione in numerosi AWS servizi. |
17 febbraio 2026 |
|
AWS_ConfigRole— Permessi aggiunti: application-autoscaling:DescribeScheduledActions, appsync:, cloudformation:, cloudformation:, cloudformation:GetApiAssociation, cloudfront:, cloudfront:DescribeStacks, cloudfront:, connect:, cur:GetStackPolicy, cur:, datazone:GetTemplate, datazone:, datazone:GetKeyGroup, datazone:, datazone:GetMonitoringSubscription, datazone:, datazone:ListKeyGroups, datazone:ListEvaluationFormVersions, datazone:DescribeReportDefinitions, datazone:, datazone:ListTagsForResource, datazone:GetDomainUnit, datazone:, datazone: zona dati:GetEnvironmentAction, zona dati:, zona dati:GetEnvironmentBlueprintConfiguration, zona dati: GetEnvironmentProfile GetGroupProfile GetSubscriptionTarget GetUserProfile ListDomainUnitsForParent ListEntityOwners ListEnvironmentActions ListEnvironmentBlueprintConfigurations, zona dati:, zona dati:ListEnvironmentProfiles, zona dati:, zona dati:, zona dati:ListPolicyGrants, zona dati:, docdb-elastic:ListProjectMemberships, docdb-elastic:ListSubscriptionTargets, docdb-elastic:, docdb-elastic:SearchGroupProfiles, ec2:, ec2:SearchUserProfiles, fis:, frauddetector:GetCluster, frauddetector:, guardduty:, guardduty:ListClusters, guardduty:, guardduty:, guardduty:ListTagsForResource, guardduty:GetRouteServerAssociations, guardduty:, guardduty:GetRouteServerPropagations, guardduty:, guardduty:SearchTransitGatewayRoutes, guardduty:, guardduty:ListTagsForResource, guardduty:, guardduty:GetListElements, guardduty:, guardduty:, guardduty:GetListsMetadata, guardduty:GetThreatEntitySet, guardduty:, guardduty:GetTrustedEntitySet, guardduty:, guardduty:ListThreatEntitySets, guardduty:, guardduty:ListTrustedEntitySets, guardduty:, guardduty:, guardduty:GetCampaign, guardduty:, guardduty:, guardduty:ListCampaigns, iotfleetwise:, iotsitewise:DescribeComputationModel, iotsitewise:, iotsitewise:DescribeDataset, iotsitewise:ListComputationModels, iotsitewise:, iotwireless:, iotwireless:ListDatasets, kendra:, logs:, logs:GetWirelessDeviceImportTask, log:, mediaconnect:ListWirelessDeviceImportTasks, medialive:, medialive:, medialive:ListDataSources, medialive:DescribeQueryDefinitions, medialive:GetIntegration, medialive:, medialive:ListIntegrations, medialive:, medialive:, medialive:ListRouterOutputs, medialive:DescribeMultiplex, medialive:, medialive:DescribeSdiSource, medialive:, medialive:GetCloudWatchAlarmTemplate, medialive:, medialive:GetCloudWatchAlarmTemplateGroup, medialive:, medialive:GetEventBridgeRuleTemplate, medialive:, medialive:GetEventBridgeRuleTemplateGroup, medialive:, medialive:ListCloudWatchAlarmTemplateGroups, medialive:, medialive:ListCloudWatchAlarmTemplates, medialive:, medialive:ListEventBridgeRuleTemplateGroups, medialive:, medialive:ListEventBridgeRuleTemplates, medialive:ListSdiSources, medialive:, medialive:ListSignalMaps, medialive:, medialive:, medialive:GetConnectAttachment, medialive:, medialive::GetCoreNetwork, gestore di rete:, gestore di rete: GetCoreNetworkPolicy, network manager:GetDirectConnectGatewayAttachment, networkmanager:GetSiteToSiteVpnAttachment, networkmanager:ListAttachments, networkmanager:ListCoreNetworks, notifiche:, notifiche:GetEventRule, notifiche:ListEventRules, notifiche:ListManagedNotificationChannelAssociations, notifiche:ListNotificationHubs, refactor-spaces:ListOrganizationalUnits, refactor-spaces:GetApplication, refactor-spaces: GetRouteListRoutes, resource-explorer-2:GetDefaultView, route53resolver:, route53resolver:GetOutpostResolver, securityhub:ListOutpostResolvers, securityhub: V2DescribeOrganizationConfiguration, securityhub: GetAggregator V2, securityhub:GetAutomationRuleV2, hub di sicurezza:GetConfigurationPolicyAssociation, hub di sicurezza:GetFindingAggregator, hub di sicurezza: ListAggregators V2, hub di sicurezza:ListAutomationRulesV2, hub di sicurezza:ListConfigurationPolicyAssociations, sms-voce:ListFindingAggregators, sms-voce:DescribeConfigurationSets, sms-voce:DescribeKeywords, sms-voce:DescribeProtectConfigurations, sms-voce:, sms-voce:GetProtectConfigurationCountryRuleSet, sms-voce:ListPoolOriginationIdentities, sms-voce:ListTagsForResource, spazi di lavoro web:GetTrustStore, spazi di lavoro web:GetTrustStoreCertificate, spazi di lavoro web:GetUserAccessLoggingSettings, spazi di lavoro web:ListTagsForResource. |
Questa policy ora supporta autorizzazioni aggiuntive per la registrazione delle modifiche alla configurazione in numerosi AWS servizi. |
17 febbraio 2026 |
|
AWSConfigServiceRolePolicy— Politica gestita aggiornata con autorizzazioni complete per la registrazione della configurazione AWS delle risorse in oltre 100 AWS servizi tra cui servizi di elaborazione, archiviazione, rete, sicurezza, analisi e machine learning. |
Questa policy ora fornisce una documentazione avanzata delle autorizzazioni dei servizi e supporta il monitoraggio completo di tutti i AWS servizi che AWS Config supportano la registrazione della configurazione. |
27 gennaio 2026 |
|
AWS_ConfigRole— Politica gestita aggiornata con autorizzazioni complete per la registrazione della configurazione AWS delle risorse in oltre 100 AWS servizi tra cui servizi di elaborazione, archiviazione, rete, sicurezza, analisi e machine learning. |
Questa policy ora fornisce una documentazione avanzata delle autorizzazioni dei servizi e supporta il monitoraggio completo di tutti i AWS servizi che AWS Config supportano la registrazione della configurazione. |
27 gennaio 2026 |
|
AWS_ConfigRole— aggiungere «s3tables: «, ListTagsForResource «s3tables: «, «s3tables:GetTableBucketMetricsConfiguration» GetTableBucketStorageClass |
Questa politica ora supporta autorizzazioni aggiuntive per S3Tables.. |
09 gennaio 2026 |
|
AWSConfigServiceRolePolicy— aggiungere «s3tables: «, ListTagsForResource «s3tables: «, «s3tables:GetTableBucketMetricsConfiguration» GetTableBucketStorageClass |
Questa policy ora supporta autorizzazioni aggiuntive per S3Tables. |
09 gennaio 2026 |
|
AWS_ConfigRole— aggiungi «lightsail:GetActiveNames" «lightsail:" «s3:GetOperations» GetBucketAbac |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Lightsail e Amazon Simple Storage Service (Amazon S3). |
20 novembre 2025 |
|
AWSConfigServiceRolePolicy— aggiungi «lightsail:GetActiveNames" «lightsail:" «s3:GetOperations» GetBucketAbac |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Lightsail e Amazon Simple Storage Service (Amazon S3). |
20 novembre 2025 |
|
AWSConfigServiceRolePolicy— Politica gestita aggiornata con autorizzazioni complete per la registrazione della configurazione AWS delle risorse in oltre 100 AWS servizi tra cui servizi di elaborazione, archiviazione, rete, sicurezza, analisi e machine learning. |
Questa policy ora fornisce una documentazione avanzata delle autorizzazioni dei servizi e supporta il monitoraggio completo di tutti i AWS servizi che AWS Config supportano la registrazione della configurazione. |
11 novembre 2025 |
|
AWS_ConfigRole— Politica gestita aggiornata con autorizzazioni complete per la registrazione della configurazione AWS delle risorse su più servizi AWS Identity and Access Management, tra cui Amazon Elastic Compute Cloud, Amazon Simple Storage Service AWS Lambda, Amazon Relational Database Service e molti altri. |
Questa policy ora supporta autorizzazioni aggiuntive per la registrazione e il monitoraggio completi della configurazione AWS delle risorse in tutti i servizi supportati. AWS |
10 novembre 2025 |
|
AWS_ConfigRole— aggiungi «amplify:GetDomainAssociation" «amplify:" «amplify:ListDomainAssociations" «appsync:" «bedrock:ListTagsForResource" «bedrock:GetSourceApiAssociation" «bedrock:" «bedrock:ListSourceApiAssociations" «cloud" «cloudformation:GetFlow" «codeartifact:ListAgentCollaborators" «codeartifact:ListFlows" «codeartifact:ListPrompts" «codepipeline:Trail:GetResourcePolicy" «codepipeline:DescribePublisher" «codepipeline:" «codepipeline:DescribePackageGroup" «codepipeline:" «codepipeline:ListAllowedRepositoriesForGroup" «codepipeline:ListPackageGroups" «codepipeline:"» «connect:ListActionTypes" «connect:" «scadenza:ListTagsForResource" «ec2:" «ec2:ListWebhooks" «ec DescribeTrafficDistributionGroup ListTrafficDistributionGroups ListFarms GetTransitGatewayRouteTablePropagations SearchLocalGatewayRoutes 2: SearchTransitGatewayMulticastGroups "«entityresolution:GetMatchingWorkflow" «entityresolution:ListMatchingWorkflows" «iotsitewise:ListAssetModelCompositeModels" «iotsitewise:ListAssetModelProperties" «iotsitewise:ListAssetProperties" «iotsitewise:ListAssociatedAssets" «ivs:ListPublicKeys" «lambda:GetProvisionedConcurrencyConfig" «lambda:GetRuntimeManagementConfig" «lambda:ListFunctionEventInvokeConfigs" «pipe:" «quicksight:DescribePipe" «quicksight:ListPipes" «quicksight:DescribeRefreshSchedule" «ListRefreshSchedulesredshift-server" less:" «redshift:ListSnapshotCopyConfigurations" «rolesanywhere:GetResourcePolicy" «rolesanywhere:GetCrl" «sagemaker:ListCrls" «sagemaker:DescribeApp" «sagemaker:DescribeUserProfile" «sagemaker: ListFunctionUrlConfigs ListApps«sagemaker:ListModelPackages" «sagemaker:" «secretsmanager:ListUserProfiles" «securitylake:GetResourcePolicy" «servicecatalog:ListSubscribers" «servicecatalog:ListTagsForResource" «servicecatalog:DescribeServiceAction" «servicecatalog:ListApplications" «shield:" «shield:ListAssociatedResources" «ssm-incidents:ListProtectionGroups" «ssm:ListTagsForResource" «ssm:" «ssm:GetReplicationSet" «ssm:" «ssm:ListReplicationSets" «ssm:DescribeAssociation" «ssm:DescribePatchBaselines" «ssm:" «ssm:GetDefaultPatchBaseline" «ssm:GetPatchBaseline" «ssm:GetResourcePolicies" «ssm:ListAssociations"» ssm: "«ssm:ListResourceDataSync" «ssm:ListLoggingConfigurations" «wafv2:" «bedrock-agentcore:ListCodeInterpreters" «bedrock-agentcore:GetCodeInterpreter" «bedrock -agentcore: ListBrowsers "«bedrock-agentcore:GetBrowser" «bedrock-agentcore:ListAgentRuntimes" «bedrock-agentcore:GetAgentRuntime" «bedrock-agentcore:ListAgentRuntimeEndpoints" «bedrock-agentcore:GetAgentRuntimeEndpoint» |
Questa politica ora supporta autorizzazioni aggiuntive per AWS Amplify, AWS AppSync, Amazon Bedrock, AWS CloudTrail, CloudFormation, AWS CodeArtifact AWS CodePipeline, Connect Customer AWS Deadline Cloud,, Amazon EC2 AWS Entity Resolution,, AWS IoT SiteWise, Amazon IVS, AWS Lambda, Amazon EventBridge, Amazon Quick, Amazon Redshift, Amazon Redshift Serverless AWS Identity and Access Management Roles Anywhere,, Amazon SageMaker, AWS Secrets Manager, Amazon Security Lake AWS Service Catalog, AWS Shield,, Amazon EC2 Systems Manager e AWS WAFV2. |
1° ottobre 2025 |
|
AWSConfigServiceRolePolicy— aggiungi «amplify:GetDomainAssociation" «amplify:ListDomainAssociations" «amplify:" «appsync:ListTagsForResource" «bedrock:GetSourceApiAssociation" «bedrock:ListSourceApiAssociations" «bedrock:GetFlow" «bedrock:" «cloud ListAgentCollaboratorsTrail:GetResourcePolicy" «cloudformation:ListFlows" «codeartifact:ListPrompts" «codeartifact:DescribePublisher" «codeartifact:" «codepipeline:DescribePackageGroup" «codepipeline:ListAllowedRepositoriesForGroup" «codepipeline:" «codepipeline:ListPackageGroups" «codepipeline:ListActionTypes" «codepipeline:ListTagsForResource" «codepipeline:ListWebhooks" «codepipeline:DescribeTrafficDistributionGroup"» «connect:ListTrafficDistributionGroups" «connect:ListFarms" «scadenza:" «ec2:GetTransitGatewayRouteTablePropagations" «ec2:SearchLocalGatewayRoutes" «ec 2: SearchTransitGatewayMulticastGroups "«entityresolution:GetMatchingWorkflow" «entityresolution:ListMatchingWorkflows" «iotsitewise:ListAssetModelCompositeModels" «iotsitewise:ListAssetModelProperties" «iotsitewise:ListAssetProperties" «iotsitewise:ListAssociatedAssets" «ivs:ListPublicKeys" «lambda:GetProvisionedConcurrencyConfig" «lambda:GetRuntimeManagementConfig" «lambda:ListFunctionEventInvokeConfigs" «pipe:" «quicksight:DescribePipe" «quicksight:ListPipes" «quicksight:DescribeRefreshSchedule" «ListRefreshSchedulesredshift-server" less:" «redshift:ListSnapshotCopyConfigurations" «rolesanywhere:GetResourcePolicy" «rolesanywhere:GetCrl" «sagemaker:ListCrls" «sagemaker:DescribeApp" «sagemaker:DescribeUserProfile" «sagemaker: ListFunctionUrlConfigs ListApps«sagemaker:ListModelPackages" «sagemaker:" «secretsmanager:ListUserProfiles" «securitylake:GetResourcePolicy" «servicecatalog:ListSubscribers" «servicecatalog:ListTagsForResource" «servicecatalog:DescribeServiceAction" «servicecatalog:ListApplications" «shield:" «shield:ListAssociatedResources" «ssm-incidents:ListProtectionGroups" «ssm:ListTagsForResource" «ssm:" «ssm:GetReplicationSet" «ssm:" «ssm:ListReplicationSets" «ssm:DescribeAssociation" «ssm:DescribePatchBaselines" «ssm:" «ssm:GetDefaultPatchBaseline" «ssm:GetPatchBaseline" «ssm:GetResourcePolicies" «ssm:ListAssociations"» ssm: "«ssm:ListResourceDataSync" «ssm:ListLoggingConfigurations" «wafv2:" «bedrock-agentcore:ListCodeInterpreters" «bedrock-agentcore:GetCodeInterpreter" «bedrock -agentcore: ListBrowsers "«bedrock-agentcore:GetBrowser" «bedrock-agentcore:ListAgentRuntimes" «bedrock-agentcore:GetAgentRuntime" «bedrock-agentcore:ListAgentRuntimeEndpoints" «bedrock-agentcore:GetAgentRuntimeEndpoint» |
Questa politica ora supporta autorizzazioni aggiuntive per AWS Amplify, AWS AppSync, Amazon Bedrock, AWS CloudTrail, CloudFormation, AWS CodeArtifact AWS CodePipeline, Connect Customer AWS Deadline Cloud,, Amazon EC2 AWS Entity Resolution,, AWS IoT SiteWise, Amazon IVS, AWS Lambda, Amazon EventBridge, Amazon Quick, Amazon Redshift, Amazon Redshift Serverless AWS Identity and Access Management Roles Anywhere,, Amazon SageMaker, AWS Secrets Manager, Amazon Security Lake AWS Service Catalog, AWS Shield,, Amazon EC2 Systems Manager e AWS WAFV2. |
1° ottobre 2025 |
|
AWS_ConfigRole— Aggiungere «arc-zonal-shift: GetAutoshiftObserverNotificationStatus «, «bedrock: «, GetModelInvocationLoggingConfiguration «cloudtrail: «, GetEventConfiguration «codeartifact: «, DescribeDomain «codeartifact: «, «deadline: GetDomainPermissionsPolicy «, «deadline: «, GetFleet «deadline: «, GetQueueFleetAssociation «deadline: «, ListFleets «deadline: «, «deadline: ListQueueFleetAssociations «, «dms: ListTagsForResource «, «dms: DescribeDataMigrations «, «glue: ListMigrationProjects «, «kafkaconnect: GetDataCatalogEncryptionSettings «, «kafkaconnect: DescribeCustomPlugin «, «kafkaconnect:» afkaconnect: DescribeWorkerConfiguration «, ListCustomPlugins «kafkaconnect: «, «kafkaconnect: ListTagsForResource «, «kafkaconnect: ListWorkerConfigurations «, «lakeformation: DescribeLakeFormationIdentityCenterConfiguration «, «medialive: DescribeMultiplexProgram «,» medialive: ListMultiplexPrograms «, «mediapackagev2: GetChannelGroup «, «mediapackagev2: ListChannelGroups «, «rds: «, «rolesanywhere: DescribeEngineDefaultParameters «, «rolesanywhere: GetProfile «, «rolesanywhere: GetTrustAnchor «, «rolesanywhere: ListProfiles «, «rolesanywhere: ListTagsForResource «, «s3: «, ListTrustAnchors «s3: «, «secretsmanager: GetAccessGrant «, «securitylake: ListAccessGrants «, «securitylake: DescribeSecret «, «securitylake: ListDataLakeExceptions «, «securityitylake:ListDataLakes» lake: «, ListLogSources «securitylake: «, «servicecatalog: GetAttributeGroup «, «servicecatalog: ListAttributeGroups «, «servicecatalog: ListServiceActions «, «servicecatalog: ListServiceActionsForProvisioningArtifact «, «servicecatalog: GetTrafficPolicy «, «ses: ListTagsForResource«, «ses: ListTrafficPolicies «, «xray: GetGroup «, «xray: GetGroups «, «xray: GetSamplingRules «, «xray: ListResourcePolicies «, «xray:ListTagsForResource» |
Questa politica ora supporta autorizzazioni aggiuntive per AWS ARC - Zonal Shift Amazon Bedrock,,, AWS CloudTrail, AWS CodeArtifact AWS Deadline Cloud AWS Database Migration Service AWS Glue AWS Identity and Access Management, Amazon Managed Streaming for Apache Kafka, Amazon CloudWatch Logs AWS Lake Formation,, AWS Elemental MediaLive AWS Elemental MediaPackage, Amazon Relational Database Service, Amazon Simple Storage Service AWS Secrets Manager, Amazon Security Lake AWS Service Catalog, Amazon Simple Email Service e AWS X-Ray. |
28 luglio 2025 |
|
AWSConfigServiceRolePolicy— Aggiungi «arc-zonal-shift: GetAutoshiftObserverNotificationStatus «, «bedrock: «, «cloudtrail: GetModelInvocationLoggingConfiguration «, «codeartifact: GetEventConfiguration «, «codeartifact: DescribeDomain «, «scadenza: «, «scadenza: «, «scadenza: GetDomainPermissionsPolicy «, «scadenza: GetFleet «, «scadenza: «, «scadenza: GetQueueFleetAssociation «, «dms: ListFleets «, «dms: ListQueueFleetAssociations «, «glue: «, ListTagsForResource «iam: «, «kafkaconnect:DescribeDataMigrations», ListMigrationProjects «kafkaconnect: GetDataCatalogEncryptionSettings «, «kafkaconnect: ListPolicies «, «kafkaconnect: DescribeCustomPlugin «, «kafkaconnect: «, «lakeformation: DescribeWorkerConfiguration «, «logs: «, «logs: ListCustomPlugins «, «medialive: ListTagsForResource ListWorkerConfigurations DescribeLakeFormationIdentityCenterConfiguration DescribeIndexPolicies ListTagsForResource DescribeMultiplexProgram«, «medialive: ListMultiplexPrograms «, «mediapackagev2: GetChannelGroup «, «mediapackagev2: ListChannelGroups «, «rds: DescribeEngineDefaultParameters «, «rolesanywhere: GetProfile «, «rolesanywhere: GetTrustAnchor «, «rolesanywhere: ListProfiles «, «rolesanywhere: ListTagsForResource «, «rolesanywhere: ListTrustAnchors «, «s3: GetAccessGrant «, «s3: ListAccessGrants «, «secretsmanager: DescribeSecret «, «securitylake: ListDataLakeExceptions «, «securitylake: ListDataLakes «, «securitylake: ListLogSources «, «servicecatalog: GetAttributeGroup «, «servicecatalog: ListAttributeGroups «, «servicecatalog: ListServiceActions «, «servicecatalog: ListServiceActionsForProvisioningArtifact «, «ses: GetTrafficPolicy «, «ses: ListTagsForResource «, «ses: ListTrafficPolicies «, «xray: GetGroup «, «xray: GetGroups «, «xray: GetSamplingRules «, «xray: ListResourcePolicies «, «xray: ListTagsForResource «, «arn:aws:apigateway: ::/account», «arn:aws:apigateway: ::/usageplans», «arn:aws:apigateway: ::/usageplans/». |
Questa politica ora supporta autorizzazioni aggiuntive per AWS ARC - Zonal Shift Amazon Bedrock,,, AWS CloudTrail, AWS CodeArtifact AWS Deadline Cloud AWS Database Migration Service AWS Glue AWS Identity and Access Management, Amazon Managed Streaming for Apache Kafka, Amazon CloudWatch Logs AWS Lake Formation,, AWS Elemental MediaLive AWS Elemental MediaPackage, Amazon Relational Database Service, Amazon Simple Storage Service AWS Secrets Manager, Amazon Security Lake AWS Service Catalog, Amazon Simple Email Service e Amazon API Gateway. AWS X-Ray |
28 luglio 2025 |
|
AWSConfigServiceRolePolicy— Aggiungere «backup-gateway: GetHypervisor «, «backup-gateway: ListHypervisors «, «bcm-data-exports: GetExport «, «bcm-data-exports: «, ListExports «bcm-data-exports: «, «bedrock: ListTagsForResource «, «bedrock: GetAgent «, «bedrock: GetAgentActionGroup «, «bedrock: «, GetAgentKnowledgeBase «bedrock: «, GetDataSource «bedrock: «, GetFlowAlias «bedrock: «, «bedrock: GetFlowVersion «, «bedrock: ListAgentActionGroups «, «bedrock: ListAgentKnowledgeBases «, «bedrock:ListDataSources», «bedrock: ListFlowAliases «, «bedrock: «, ListFlowVersions «bedrock: «, BatchDescribeTypeConfigurations «cloudformation: «, «cloudformation: DescribeStackInstance «, «cloudformation: DescribeStackSet «, «cloudformation: ListStackInstances«, «cloudformation: ListStackSets «, «cloudfront: GetPublicKey «, «cloudfront: «, GetRealtimeLogConfig «cloudfront: «, «cloudfront: ListPublicKeys «, «entityresolution: ListRealtimeLogConfigs «, «entityresolution: GetIdMappingWorkflow «, «entityresolution: GetSchemaMapping «, «entityresolution: ListIdMappingWorkflows «, «entityresolution: «, ListSchemaMappings «entityresolution: «, «iotdeviceadvisor: ListTagsForResource «, «iotdeviceadvisor: GetSuiteDefinition «, «iotdeviceadvisor: ListSuiteDefinitions «, «iotdeviceadvisor: GetEventSourceMapping «, ListEventSourceMappings «lambda:, «lambda: «, GetChannel «mediapackagev2: «, «mediapackagev2: ListChannels «, «gestore di rete: GetTransitGatewayPeering «, «gestore di rete: ListPeerings «, «pca-connector- annuncio: GetDirectoryRegistration «, «pca-connector-ad: ListDirectoryRegistrations «, «pca-connector-ad: ListTagsForResource «, «rds: DescribeDBShardGroups «, «rds: DescribeIntegrations «, «redshift: DescribeIntegrations «, «s3tables: GetTableBucket «, «s3tables: GetTableBucketEncryption «, «s3tables: GetTableBucketMaintenanceConfiguration «, «s3tables: ListTableBuckets «, «ssm-quicksetup: GetConfigurationManager «, «ssm-quicksetup:ListConfigurationManagers» |
Questa politica ora supporta autorizzazioni aggiuntive per AWS Backup gateway Gestione costi e fatturazione AWS, Amazon Bedrock, Amazon AWS CloudFormation,, CloudFront, AWS Entity Resolution, AWS IoT Core Device Advisor,, AWS Lambda AWS Network Manager Autorità di certificazione privata AWS, Amazon Relational Database Service, Amazon Redshift, Amazon S3 Tables, AWS Configurazione rapida di Systems Manager. |
18 giugno 2025 |
AWS_ConfigRole— Aggiungere «backup-gateway: GetHypervisor «, «backup-gateway: ListHypervisors «, «bcm-data-exports: «, GetExport «bcm-data-exports: «, «bcm-data-exports: ListExports «, «bedrock: ListTagsForResource «, «bedrock: «, GetAgent «bedrock: «, «bedrock: GetAgentActionGroup «, «bedrock: GetAgentKnowledgeBase «, «bedrock: GetDataSource «, «bedrock: GetFlowAlias «, «bedrock: «, GetFlowVersion «bedrock: «, ListAgentActionGroups «bedrock: «, «bedrock:ListAgentKnowledgeBases», «bedrock: ListDataSources «, «bedrock: ListFlowAliases «, «bedrock: ListFlowVersions «, «cloudformation: «, BatchDescribeTypeConfigurations «cloudformation: «, «cloudformation: DescribeStackInstance «, «cloudformation: DescribeStackSet ListStackInstances«, «cloudformation: ListStackSets «, «cloudfront: GetPublicKey «, «cloudfront: «, GetRealtimeLogConfig «cloudfront: «, «cloudfront: ListPublicKeys «, «entityresolution: ListRealtimeLogConfigs «, «entityresolution: GetIdMappingWorkflow «, «entityresolution: GetSchemaMapping «, «entityresolution: ListIdMappingWorkflows «, «entityresolution: «, ListSchemaMappings «entityresolution: «, «iotdeviceadvisor: ListTagsForResource «, «iotdeviceadvisor: GetSuiteDefinition «, «iotdeviceadvisor: ListSuiteDefinitions «, «iotdeviceadvisor: GetEventSourceMapping «, ListEventSourceMappings «lambda:, «lambda: GetTransitGatewayPeering «, «networkmanager: ListPeerings «, «gestore di rete: «, «pca-connector-ad: GetDirectoryRegistration «, «pca-connector-ad: ListDirectoryRegistrations «, «pca- connector-ad: ListTagsForResource «, «rds: DescribeDBShardGroups «, «rds: DescribeIntegrations «, «redshift: DescribeIntegrations «, «s3tables: GetTableBucket «, «s3tables: GetTableBucketEncryption «, «s3tables: GetTableBucketMaintenanceConfiguration «, «s3tables: ListTableBuckets «, «ssm-quicksetup: GetConfigurationManager «, «ssm-quicksetup:ListConfigurationManagers» |
Questa politica ora supporta autorizzazioni aggiuntive per AWS Backup gateway Gestione costi e fatturazione AWS, Amazon Bedrock, Amazon AWS CloudFormation,, CloudFront, AWS Entity Resolution, AWS IoT Core Device Advisor,, AWS Lambda AWS Network Manager Autorità di certificazione privata AWS, Amazon Relational Database Service, Amazon Redshift, Amazon S3 Tables, AWS Configurazione rapida di Systems Manager. |
18 giugno 2025 |
|
AWS_ConfigRole: aggiunta di "bedrock:GetGuardrail", "bedrock:GetInferenceProfile", "bedrock:GetKnowledgeBase", "bedrock:ListGuardrails", "bedrock:ListInferenceProfiles", "bedrock:ListKnowledgeBases", "bedrock:ListTagsForResource" |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Bedrock. |
27 maggio 2025 |
|
AWSConfigServiceRolePolicy: aggiunta di "bedrock:GetGuardrail", "bedrock:GetInferenceProfile", "bedrock:GetKnowledgeBase", "bedrock:ListGuardrails", "bedrock:ListInferenceProfiles", "bedrock:ListKnowledgeBases", "bedrock:ListTagsForResource" |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Bedrock. |
27 maggio 2025 |
|
AWS_ConfigRole: aggiunta di "b2bi:GetPartnership", "b2bi:GetProfile", "b2bi:ListPartnerships", "b2bi:ListProfiles", "bedrock:ListAgents", "cleanrooms:GetConfiguredTable", "cleanrooms:GetConfiguredTableAnalysisRule", "cleanrooms:GetMembership", "cleanrooms:GetPrivacyBudgetTemplate", "cleanrooms:ListConfiguredTables", "cleanrooms:ListMemberships", "cleanrooms:ListPrivacyBudgetTemplates", "codeconnections:GetConnection", "codeconnections:ListConnections", "codeconnections:ListTagsForResource", "directconnect:DescribeConnections", "dms:DescribeReplicationConfigs", "logs:DescribeAccountPolicies", "logs:DescribeResourcePolicies", "macie2:ListAutomatedDiscoveryAccounts", "managedblockchain:GetAccessor", "managedblockchain:ListAccessors", "qbusiness:GetApplication", "qbusiness:ListApplications", "qbusiness:ListTagsForResource", "route53profiles:GetProfile", "route53profiles:GetProfileAssociation", "route53profiles:ListProfileAssociations", "route53profiles:ListProfiles", "route53profiles:ListTagsForResource", "s3:GetAccessGrantsInstance", "s3:GetAccessGrantsLocation", "s3:ListAccessGrantsInstances", "s3:ListAccessGrantsLocations", "sagemaker:DescribeCluster", "sagemaker:DescribeMlflowTrackingServer", "sagemaker:DescribeStudioLifecycleConfig", "sagemaker:ListClusters", "sagemaker:ListMlflowTrackingServers", "sagemaker:ListStudioLifecycleConfigs", "securityhub:DescribeStandardsControls", "securityhub:GetEnabledStandards", "ssm-contacts:GetContact", "ssm-contacts:GetContactChannel", "ssm-contacts:ListContactChannels", "ssm-contacts:ListContacts", "ssm-incidents:GetResponsePlan", "ssm-incidents:ListResponsePlans", "ssm-incidents:ListTagsForResource", "ssm:DescribeInstanceInformation" |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Bedrock AWS B2B Data Interchange,,, AWS Clean Rooms, AWS Database Migration Service (AWS DMS) AWS CodeConnections AWS Direct Connect, Amazon CloudWatch Logs, Amazon Macie, Amazon Managed Blockchain, Amazon Q Business, Route 53 Profiles, Amazon Simple Storage Service (Amazon S3), Amazon SageMaker AI e, Contacts e. AWS Security Hub CSPM Strumento di gestione degli incidenti AWS Systems Manager Strumento di gestione degli incidenti AWS Systems Manager AWS Systems Manager |
08 aprile 2025 |
|
AWSConfigServiceRolePolicy: aggiunta di "b2bi:GetPartnership", "b2bi:GetProfile", "b2bi:ListPartnerships", "b2bi:ListProfiles", "bedrock:ListAgents", "cleanrooms:GetConfiguredTable", "cleanrooms:GetConfiguredTableAnalysisRule", "cleanrooms:GetMembership", "cleanrooms:GetPrivacyBudgetTemplate", "cleanrooms:ListConfiguredTables", "cleanrooms:ListMemberships", "cleanrooms:ListPrivacyBudgetTemplates", "codeconnections:GetConnection", "codeconnections:ListConnections", "codeconnections:ListTagsForResource", "directconnect:DescribeConnections", "dms:DescribeReplicationConfigs", "logs:DescribeAccountPolicies", "logs:DescribeResourcePolicies", "macie2:ListAutomatedDiscoveryAccounts", "managedblockchain:GetAccessor", "managedblockchain:ListAccessors", "qbusiness:GetApplication", "qbusiness:ListApplications", "qbusiness:ListTagsForResource", "route53profiles:GetProfile", "route53profiles:GetProfileAssociation", "route53profiles:ListProfileAssociations", "route53profiles:ListProfiles", "route53profiles:ListTagsForResource", "s3:GetAccessGrantsInstance", "s3:GetAccessGrantsLocation", "s3:ListAccessGrantsInstances", "s3:ListAccessGrantsLocations", "sagemaker:DescribeCluster", "sagemaker:DescribeMlflowTrackingServer", "sagemaker:DescribeStudioLifecycleConfig", "sagemaker:ListClusters", "sagemaker:ListMlflowTrackingServers", "sagemaker:ListStudioLifecycleConfigs", "securityhub:DescribeStandardsControls", "securityhub:GetEnabledStandards", "ssm-contacts:GetContact", "ssm-contacts:GetContactChannel", "ssm-contacts:ListContactChannels", "ssm-contacts:ListContacts", "ssm-incidents:GetResponsePlan", "ssm-incidents:ListResponsePlans", "ssm-incidents:ListTagsForResource", "ssm:DescribeInstanceInformation" |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Bedrock AWS B2B Data Interchange,,, AWS Clean Rooms, AWS Database Migration Service (AWS DMS) AWS CodeConnections AWS Direct Connect, Amazon CloudWatch Logs, Amazon Macie, Amazon Managed Blockchain, Amazon Q Business, Route 53 Profiles, Amazon Simple Storage Service (Amazon S3), Amazon SageMaker AI e AWS Security Hub CSPM Contacts e Strumento di gestione degli incidenti AWS Systems Manager. Strumento di gestione degli incidenti AWS Systems Manager
AWS Systems Manager Questa politica ora supporta anche l'autorizzazione ad accedere a tutti i nomi di dominio Amazon API Gateway includendo il modello di risorse "». |
08 aprile 2025 |
|
AWS_ConfigRole: aggiunta di "ec2:GetAllowedImagesSettings" |
Questa policy ora supporta autorizzazioni aggiuntive per Amazon Elastic Compute Cloud (Amazon EC2). |
4 marzo 2025 |
|
AWSConfigServiceRolePolicy: aggiunta di "ec2:GetAllowedImagesSettings" |
Questa policy ora supporta autorizzazioni aggiuntive per Amazon Elastic Compute Cloud (Amazon EC2). |
4 marzo 2025 |
|
AWS_ConfigRole: aggiunta di "cleanrooms-ml:GetTrainingDataset", "cleanrooms-ml:ListTrainingDatasets", "comprehend:DescribeFlywheel", "comprehend:ListFlywheels", "comprehend:ListTagsForResource", "ec2:GetSnapshotBlockPublicAccessState", "omics:GetAnnotationStore", "omics:GetRunGroup", "omics:GetSequenceStore", "omics:GetVariantStore", "omics:ListAnnotationStores", "omics:ListRunGroups", "omics:ListSequenceStores", "omics:ListTagsForResource", "omics:ListVariantStores", "s3express:GetEncryptionConfiguration", "s3express:GetLifecycleConfiguration", "ses:GetDedicatedIpPool", "ses:GetDedicatedIps", and "ses:ListDedicatedIpPools" |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Comprehend AWS Clean Rooms, Amazon Elastic Compute Cloud (Amazon EC2) AWS HealthOmics, Amazon Simple Storage Service (Amazon S3) e Amazon Simple Email Service (Amazon SES). |
16 gennaio 2025 |
|
AWSConfigServiceRolePolicy: aggiunta di "cleanrooms-ml:GetTrainingDataset", "cleanrooms-ml:ListTrainingDatasets", "comprehend:DescribeFlywheel", "comprehend:ListFlywheels", "comprehend:ListTagsForResource", "ec2:GetSnapshotBlockPublicAccessState", "omics:GetAnnotationStore", "omics:GetRunGroup", "omics:GetSequenceStore", "omics:GetVariantStore", "omics:ListAnnotationStores", "omics:ListRunGroups", "omics:ListSequenceStores", "omics:ListTagsForResource", "omics:ListVariantStores", "s3express:GetEncryptionConfiguration", "s3express:GetLifecycleConfiguration", "ses:GetDedicatedIpPool", "ses:GetDedicatedIps", and "ses:ListDedicatedIpPools" |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Comprehend AWS Clean Rooms, Amazon Elastic Compute Cloud (Amazon EC2) AWS HealthOmics, Amazon Simple Storage Service (Amazon S3) e Amazon Simple Email Service (Amazon SES). |
16 gennaio 2025 |
|
AWSConfigServiceRolePolicy: aggiunta di "organizations:ListAWSServiceAccessForOrganization" |
Questa policy ora supporta autorizzazioni aggiuntive per. AWS Organizations |
18 dicembre 2024 |
|
AWS_ConfigRole: aggiunta di "app-integrations:GetApplication", "app-integrations:ListApplications", "app-integrations:ListTagsForResource", "appconfig:GetExtension", "appconfig:ListExtensions", "cloudtrail:GetInsightSelectors", "connect:DescribeQueue", "connect:DescribeRoutingProfile", "connect:DescribeSecurityProfile", "connect:ListQueueQuickConnects", "connect:ListQueues", "connect:ListRoutingProfileQueues", "connect:ListRoutingProfiles", "connect:ListSecurityProfileApplications", "connect:ListSecurityProfilePermissions", "connect:ListSecurityProfiles", "datazone:GetDomain", "datazone:ListDomains", "devops-guru:ListNotificationChannels", "glue:GetRegistry", "glue:ListRegistries", "identitystore:DescribeGroup", "identitystore:DescribeGroupMembership" "identitystore:ListGroupMemberships", "identitystore:ListGroups", "iot:DescribeThingGroup", "iot:DescribeThingType", "iot:ListThingGroups", "iot:ListThingTypes", "iotfleetwise:GetDecoderManifest", "iotfleetwise:GetFleet", "iotfleetwise:GetModelManifest", "iotfleetwise:GetSignalCatalog", "iotfleetwise:GetVehicle", "iotfleetwise:ListDecoderManifestNetworkInterfaces", "iotfleetwise:ListDecoderManifests", "iotfleetwise:ListDecoderManifestSignals", "iotfleetwise:ListFleets", "iotfleetwise:ListModelManifestNodes", "iotfleetwise:ListModelManifests", "iotfleetwise:ListSignalCatalogNodes", "iotfleetwise:ListSignalCatalogs", "iotfleetwise:ListTagsForResource", "iotfleetwise:ListVehicles", "iotwireless:GetDestination", "iotwireless:GetDeviceProfile", "iotwireless:GetWirelessGateway", "iotwireless:ListDestinations", "iotwireless:ListDeviceProfiles", "iotwireless:ListWirelessGateways", "ivschat:GetLoggingConfiguration", "ivschat:GetRoom" "ivschat:ListLoggingConfigurations", "ivschat:ListRooms", "ivschat:ListTagsForResource", "logs:GetLogAnomalyDetector", "logs:ListLogAnomalyDetectors", "oam:GetSink" "oam:GetSinkPolicy", "oam:ListSinks", "payment-cryptography:GetAlias", "payment-cryptography:GetKey", "payment-cryptography:ListAliases", "payment-cryptography:ListKeys", "payment-cryptography:ListTagsForResource", "rds:DescribeDBProxyTargetGroups", "rds:DescribeDBProxyTargets", "rekognition:DescribeProjects", "s3:GetStorageLensGroup", "s3:ListStorageLensGroups", "s3:ListTagsForResource", "scheduler:GetScheduleGroup", "scheduler:ListScheduleGroups", "scheduler:ListTagsForResource", "ssm:GetServiceSetting", "vpc-lattice:GetAccessLogSubscription", "vpc-lattice:GetService", "vpc-lattice:GetServiceNetwork", "vpc-lattice:GetTargetGroup", "vpc-lattice:ListAccessLogSubscriptions", "vpc-lattice:ListServiceNetworks", "vpc-lattice:ListServices", "vpc-lattice:ListTagsForResource", "vpc-lattice:ListTargetGroups", and "vpc-lattice:ListTargets" |
Questa politica ora supporta autorizzazioni aggiuntive per AWS AppConfig Amazon Connect Customer, Amazon DataZone, Amazon DevOps Guru, Identity Store AWS Glue,,, AWS IoT AWS IoT FleetWise Wireless AWS IoT, Amazon Interactive Video Service (Amazon IVS), Amazon CloudWatch Logs, Amazon CloudWatch Observability Access Manager AWS Payment Cryptography, Amazon Relational Database Service (Amazon RDS), Amazon Rekognition, Amazon Simple Storage Service (Amazon S3), Amazon EventBridge Scheduler e Amazon VPC Lattice. AWS CloudTrail AWS Systems Manager |
7 novembre 2024 |
|
AWSConfigServiceRolePolicy: aggiunta di "app-integrations:GetApplication", "app-integrations:ListApplications", "app-integrations:ListTagsForResource", "appconfig:GetExtension", "appconfig:ListExtensions", "cloudtrail:GetInsightSelectors", "connect:DescribeQueue", "connect:DescribeRoutingProfile", "connect:DescribeSecurityProfile", "connect:ListQueueQuickConnects", "connect:ListQueues", "connect:ListRoutingProfileQueues", "connect:ListRoutingProfiles", "connect:ListSecurityProfileApplications", "connect:ListSecurityProfilePermissions", "connect:ListSecurityProfiles", "datazone:GetDomain", "datazone:ListDomains", "devops-guru:ListNotificationChannels", "glue:GetRegistry", "glue:ListRegistries", "identitystore:DescribeGroup", "identitystore:DescribeGroupMembership" "identitystore:ListGroupMemberships", "identitystore:ListGroups", "iot:DescribeThingGroup", "iot:DescribeThingType", "iot:ListThingGroups", "iot:ListThingTypes", "iotfleetwise:GetDecoderManifest", "iotfleetwise:GetFleet", "iotfleetwise:GetModelManifest", "iotfleetwise:GetSignalCatalog", "iotfleetwise:GetVehicle", "iotfleetwise:ListDecoderManifestNetworkInterfaces", "iotfleetwise:ListDecoderManifests", "iotfleetwise:ListDecoderManifestSignals", "iotfleetwise:ListFleets", "iotfleetwise:ListModelManifestNodes", "iotfleetwise:ListModelManifests", "iotfleetwise:ListSignalCatalogNodes", "iotfleetwise:ListSignalCatalogs", "iotfleetwise:ListTagsForResource", "iotfleetwise:ListVehicles", "iotwireless:GetDestination", "iotwireless:GetDeviceProfile", "iotwireless:GetWirelessGateway", "iotwireless:ListDestinations", "iotwireless:ListDeviceProfiles", "iotwireless:ListWirelessGateways", "ivschat:GetLoggingConfiguration", "ivschat:GetRoom" "ivschat:ListLoggingConfigurations", "ivschat:ListRooms", "ivschat:ListTagsForResource", "logs:GetLogAnomalyDetector", "logs:ListLogAnomalyDetectors", "oam:GetSink" "oam:GetSinkPolicy", "oam:ListSinks", "payment-cryptography:GetAlias", "payment-cryptography:GetKey", "payment-cryptography:ListAliases", "payment-cryptography:ListKeys", "payment-cryptography:ListTagsForResource", "rds:DescribeDBProxyTargetGroups", "rds:DescribeDBProxyTargets", "rekognition:DescribeProjects", "s3:GetStorageLensGroup", "s3:ListStorageLensGroups", "s3:ListTagsForResource", "scheduler:GetScheduleGroup", "scheduler:ListScheduleGroups", "scheduler:ListTagsForResource", "ssm:GetServiceSetting", "vpc-lattice:GetAccessLogSubscription", "vpc-lattice:GetService", "vpc-lattice:GetServiceNetwork", "vpc-lattice:GetTargetGroup", "vpc-lattice:ListAccessLogSubscriptions", "vpc-lattice:ListServiceNetworks", "vpc-lattice:ListServices", "vpc-lattice:ListTagsForResource", "vpc-lattice:ListTargetGroups", and "vpc-lattice:ListTargets" |
Questa politica ora supporta autorizzazioni aggiuntive per AWS AppConfig Amazon Connect Customer, Amazon DataZone, Amazon DevOps Guru AWS Glue, Identity Store,, AWS IoT, AWS IoT FleetWise Wireless AWS IoT, Amazon Interactive Video Service (Amazon IVS), Amazon CloudWatch Logs, Amazon CloudWatch Observability Access Manager AWS Payment Cryptography, Amazon Relational Database Service (Amazon RDS), Amazon Rekognition, Amazon Simple Storage Service (Amazon S3), Amazon EventBridge Scheduler e Amazon VPC Lattice. AWS CloudTrail AWS Systems Manager |
7 novembre 2024 |
|
AWS_ConfigRole: aggiunta di "aoss:BatchGetCollection," "aoss:BatchGetLifecyclePolicy," "aoss:BatchGetVpcEndpoint," "aoss:GetAccessPolicy," "aoss:GetSecurityConfig," "aoss:GetSecurityPolicy," "aoss:ListAccessPolicies," "aoss:ListCollections," "aoss:ListLifecyclePolicies," "aoss:ListSecurityConfigs," "aoss:ListSecurityPolicies," "aoss:ListVpcEndpoints," "appstream:DescribeAppBlockBuilders," "backup:GetRestoreTestingPlan," "backup:GetRestoreTestingSelection", "backup:ListRestoreTestingPlans," "backup:ListRestoreTestingSelections," "cloudTrail:GetChannel, "cloudTrail:ListChannels," "glue:GetTrigger," "glue:ListTriggers, "imagebuilder:GetLifecyclePolicy," "imagebuilder:ListLifecyclePolicies," "iot:DescribeBillingGroup," "iot:ListBillingGroups," "ivs:GetEncoderConfiguration," "ivs:GetPlaybackRestrictionPolicy," "ivs:GetStage," "ivs:GetStorageConfiguration," "ivs:ListEncoderConfigurations," "ivs:ListPlaybackRestrictionPolicies," "ivs:ListStages," "ivs:ListStorageConfigurations," "mediaconnect:DescribeBridge", "mediaconnect:DescribeGatewa," "mediaconnect:ListBridges," "mediaconnect:ListGateways", "mediatailor:DescribeChannel," "mediatailor:DescribeLiveSource," "mediatailor:DescribeSourceLocation," "mediatailor:DescribeVodSource", "mediatailor:ListChannels," "mediatailor:ListLiveSources", "mediatailor:ListSourceLocations," "mediatailor:ListVodSources," "omics:GetWorkflow," "omics:ListWorkflows," "scheduler:GetSchedule," and "scheduler:ListSchedules" |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon OpenSearch Service Severless, Amazon AppStream,, AWS Backup, AWS CloudTrail AWS Glue, EC2 Image Builder AWS IoT, Amazon Interactive Video Service (Amazon IVS), AWS Elemental MediaConnect, AWS Elemental MediaTailor AWS HealthOmics, e Amazon EventBridge Scheduler. |
16 settembre 2024 |
|
AWSConfigServiceRolePolicy: aggiunta di "aoss:BatchGetCollection," "aoss:BatchGetLifecyclePolicy," "aoss:BatchGetVpcEndpoint," "aoss:GetAccessPolicy," "aoss:GetSecurityConfig," "aoss:GetSecurityPolicy," "aoss:ListAccessPolicies," "aoss:ListCollections," "aoss:ListLifecyclePolicies," "aoss:ListSecurityConfigs," "aoss:ListSecurityPolicies," "aoss:ListVpcEndpoints," "appstream:DescribeAppBlockBuilders," "backup:GetRestoreTestingPlan," "backup:GetRestoreTestingSelection", "backup:ListRestoreTestingPlans," "backup:ListRestoreTestingSelections," "cloudTrail:GetChannel, "cloudTrail:ListChannels," "glue:GetTrigger," "glue:ListTriggers, "imagebuilder:GetLifecyclePolicy," "imagebuilder:ListLifecyclePolicies," "iot:DescribeBillingGroup," "iot:ListBillingGroups," "ivs:GetEncoderConfiguration," "ivs:GetPlaybackRestrictionPolicy," "ivs:GetStage," "ivs:GetStorageConfiguration," "ivs:ListEncoderConfigurations," "ivs:ListPlaybackRestrictionPolicies," "ivs:ListStages," "ivs:ListStorageConfigurations," "mediaconnect:DescribeBridge", "mediaconnect:DescribeGatewa," "mediaconnect:ListBridges," "mediaconnect:ListGateways", "mediatailor:DescribeChannel," "mediatailor:DescribeLiveSource," "mediatailor:DescribeSourceLocation," "mediatailor:DescribeVodSource", "mediatailor:ListChannels," "mediatailor:ListLiveSources", "mediatailor:ListSourceLocations," "mediatailor:ListVodSources," "omics:GetWorkflow," "omics:ListWorkflows," "scheduler:GetSchedule," and "scheduler:ListSchedules" |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon OpenSearch Service Severless, Amazon,,, AppStream AWS Backup AWS CloudTrail, AWS Glue EC2 Image Builder AWS IoT, Amazon Interactive Video Service (Amazon IVS),, AWS Elemental MediaConnect AWS Elemental MediaTailor, AWS HealthOmics e Amazon Scheduler. EventBridge |
16 settembre 2024 |
|
AWS_ConfigRole: aggiunta di "elasticfilesystem:DescribeTags," "redshift:DescribeTags," and "ssm-sap:ListTagsForResource" |
Questa policy ora supporta autorizzazioni aggiuntive per Amazon Elastic File System (Amazon EFS), Amazon Redshift e. AWS Systems Manager per SAP |
17 giugno 2024 |
|
AWSConfigServiceRolePolicy: aggiunta di "elasticfilesystem:DescribeTags," "redshift:DescribeTags," and "ssm-sap:ListTagsForResource" |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Elastic File System (Amazon EFS), Amazon Redshift e. AWS Systems Manager per SAP |
17 giugno 2024 |
| AWS_ConfigRole: aggiunta di "aps:DescribeAlertManagerDefinition," "cloudwatch:DescribeAlarmsForMetric," "cognito-identity:DescribeIdentityPool, "cognito-identity:GetPrincipalTagAttributeMap," "elasticache:DescribeCacheSecurityGroups," "elasticache:DescribeUserGroups," "elasticache:DescribeUsers," "elasticache:DescribeGlobalReplicationGroups," "fsx:DescribeDataRepositoryAssociations," "glue:GetDatabase," "glue:GetDatabases," "iam:ListUsers," "lambda:GetLayerVersion," "lambda:ListLayers," "lambda:ListLayerVersions," "ram:GetPermission," "ram:ListPermissionAssociations," "ram:ListPermissions," "ram:ListPermissionVersions," "redshift-serverless:GetNamespace," "redshift-serverless:GetWorkgroup," "redshift-serverless:ListNamespaces," "redshift-serverless:ListTagsForResource," "redshift-serverless:ListWorkgroups," "sagemaker:DescribeInferenceExperiment," "sagemaker:ListInferenceExperiments," and "sns:GetSMSSandboxAccountStatus" |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Managed Service per Prometheus, Amazon, Amazon Cognito, Amazon CloudWatch, Amazon FSx,, AWS Identity and Access Management (IAM),, AWS Glue, Amazon Redshift Serverless AWS Lambda AWS RAM, Amazon SageMaker AI e Amazon Simple Notification Service (Amazon SNS). ElastiCache |
22 febbraio 2024 |
| AWSConfigServiceRolePolicy: aggiunta di "aps:DescribeAlertManagerDefinition," "cloudwatch:DescribeAlarmsForMetric," "cognito-identity:DescribeIdentityPool, "cognito-identity:GetPrincipalTagAttributeMap," "elasticache:DescribeCacheSecurityGroups," "elasticache:DescribeUserGroups," "elasticache:DescribeUsers," "elasticache:DescribeGlobalReplicationGroups," "fsx:DescribeDataRepositoryAssociations," "glue:GetDatabase," "glue:GetDatabases," "iam:ListUsers," "lambda:GetLayerVersion," "lambda:ListLayers," "lambda:ListLayerVersions," "ram:GetPermission," "ram:ListPermissionAssociations," "ram:ListPermissions," "ram:ListPermissionVersions," "redshift-serverless:GetNamespace," "redshift-serverless:GetWorkgroup," "redshift-serverless:ListNamespaces," "redshift-serverless:ListTagsForResource," "redshift-serverless:ListWorkgroups," "sagemaker:DescribeInferenceExperiment," "sagemaker:ListInferenceExperiments," and "sns:GetSMSSandboxAccountStatus" |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Managed Service per Prometheus, Amazon CloudWatch, Amazon Cognito, Amazon ElastiCache, Amazon FSx, AWS Glue, AWS Identity and Access Management (IAM), AWS Lambda, AWS RAM, Amazon Redshift Serverless, Amazon SageMaker AI e Amazon Simple Notification Service (Amazon SNS). |
22 febbraio 2024 |
|
AWSConfigUserAccess— inizia a tracciare le modifiche AWS per questa AWS Config policy gestita |
Questa politica fornisce l'accesso all'uso AWS Config, inclusa la ricerca per tag nelle risorse e la lettura di tutti i tag. Ciò non fornisce l'autorizzazione alla configurazione AWS Config, che richiede privilegi amministrativi. |
22 febbraio 2024 |
| AWS_ConfigRole: aggiunta di "appconfig:GetExtensionAssociation," "appconfig:ListExtensionAssociations," "aps:DescribeLoggingConfiguration," "dms:DescribeReplicationTaskAssessmentRuns," "iam:GetOpenIDConnectProvider," "iam:ListOpenIDConnectProviders," "kafka:DescribeVpcConnection," "kafka:GetClusterPolicy," "kafka:ListVpcConnections," "logs:DescribeMetricFilters," "organizations:ListDelegatedAdministrators," "s3:GetBucketPolicyStatus," "s3express:GetBucketPolicy," and "s3express:ListAllMyDirectoryBuckets" |
Questa policy ora supporta autorizzazioni aggiuntive per Amazon Managed Service for Prometheus AWS AppConfig, (), AWS Database Migration Service (AWS DMSAWS Identity and Access Management) IAM, Amazon Managed Streaming for Apache Kafka (Amazon MSK), Amazon CloudWatch Logs e Amazon Simple Storage Service (Amazon AWS Organizations S3). |
5 dicembre 2023 |
| AWSConfigServiceRolePolicy: aggiunta di "appconfig:GetExtensionAssociation," "appconfig:ListExtensionAssociations," "aps:DescribeLoggingConfiguration," "dms:DescribeReplicationTaskAssessmentRuns," "iam:GetOpenIDConnectProvider," "iam:ListOpenIDConnectProviders," "kafka:DescribeVpcConnection," "kafka:GetClusterPolicy," "kafka:ListVpcConnections," "logs:DescribeMetricFilters," "organizations:ListDelegatedAdministrators," "s3:GetBucketPolicyStatus," "s3express:GetBucketPolicy," and "s3express:ListAllMyDirectoryBuckets" |
Questa policy ora supporta autorizzazioni aggiuntive per AWS AppConfig Amazon Managed Service for Prometheus, AWS Database Migration Service (AWS DMS), (AWS Identity and Access Management) IAM, Amazon Managed Streaming for Apache Kafka (Amazon MSK), Amazon CloudWatch Logs e Amazon Simple Storage Service (Amazon S3). AWS Organizations |
5 dicembre 2023 |
| AWS_ConfigRole: aggiunta di "backup:DescribeProtectedResource," "cognito-identity:GetIdentityPoolRoles," "cognito-identity:ListIdentityPools," "cognito-identity:ListTagsForResource," "cognito-idp:DescribeIdentityProvider," "cognito-idp:DescribeResourceServer," "cognito-idp:DescribeUserPool," "cognito-idp:DescribeUserPoolClient," "cognito-idp:DescribeUserPoolDomain," "cognito-idp:GetGroup," "cognito-idp:GetUserPoolMfaConfig," "cognito-idp:ListGroups," "cognito-idp:ListIdentityProviders," "cognito-idp:ListResourceServers," "cognito-idp:ListUserPoolClients," "cognito-idp:ListUserPools," "cognito-idp:ListTagsForResource," "connect:DescribeEvaluationForm," "connect:DescribeInstanceStorageConfig," "connect:DescribePrompt," "connect:DescribeRule," "connect:DescribeUser," "connect:GetTaskTemplate," "connect:ListApprovedOrigins," "connect:ListEvaluationForms," "connect:ListInstanceStorageConfigs," "connect:ListIntegrationAssociations," "connect:ListPrompts," "connect:ListRules," "connect:ListSecurityKeys," "connect:ListTagsForResource," "connect:ListTaskTemplates," "connect:ListUsers," "emr-containers:DescribeVirtualCluster," "emr-containers:ListVirtualClusters," "emr-serverless:GetApplication," "emr-serverless:ListApplications," "groundstation:GetDataflowEndpointGroup," "groundstation:ListDataflowEndpointGroups," "m2:GetEnvironment," "m2:ListEnvironments," "m2:ListTagsForResource," "memorydb:DescribeAcls," "memorydb:DescribeClusters," "memorydb:DescribeParameterGroups," "memorydb:DescribeParameters," "memorydb:DescribeSubnetGroups," "organizations:ListRoots," "quicksight:DescribeAccountSubscription," "quicksight:DescribeDataSetRefreshProperties," "rds:DescribeEngineDefaultClusterParameters," "redshift:DescribeEndpointAccess," "redshift:DescribeEndpointAuthorization," "route53:GetChange," "route53:ListCidrBlocks," "route53:ListCidrLocations," "serviceCatalog:DescribePortfolioShares," "transfer:DescribeProfile," and "transfer:ListProfiles" |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Cognito, Amazon Connect Customer, Amazon EMR AWS Ground Station Modernizzazione del mainframe AWS,,, Amazon MemoryDB AWS Organizations, Amazon Quick, Amazon Relational Database Service (Amazon RDS), Amazon Redshift, Amazon Route 53 e AWS Transfer Family. AWS Service Catalog |
17 novembre 2023 |
| AWS_ConfigRole: aggiunta di "Sid": "AWSConfigServiceRolePolicyStatementID," "Sid": "AWSConfigSLRLogStatementID," "Sid": "AWSConfigSLRLogEventStatementID," and "Sid": "AWSConfigSLRApiGatewayStatementID" |
Questa policy ora aggiunge identificatori di sicurezza (SID) per |
17 novembre 2023 |
| AWSConfigServiceRolePolicy: aggiunta di "backup:DescribeProtectedResource," "cognito-identity:GetIdentityPoolRoles," "cognito-identity:ListIdentityPools," "cognito-identity:ListTagsForResource," "cognito-idp:DescribeIdentityProvider," "cognito-idp:DescribeResourceServer," "cognito-idp:DescribeUserPool," "cognito-idp:DescribeUserPoolClient," "cognito-idp:DescribeUserPoolDomain," "cognito-idp:GetGroup," "cognito-idp:GetUserPoolMfaConfig," "cognito-idp:ListGroups," "cognito-idp:ListIdentityProviders," "cognito-idp:ListResourceServers," "cognito-idp:ListUserPoolClients," "cognito-idp:ListUserPools," "cognito-idp:ListTagsForResource," "connect:DescribeEvaluationForm," "connect:DescribeInstanceStorageConfig," "connect:DescribePrompt," "connect:DescribeRule," "connect:DescribeUser," "connect:GetTaskTemplate," "connect:ListApprovedOrigins," "connect:ListEvaluationForms," "connect:ListInstanceStorageConfigs," "connect:ListIntegrationAssociations," "connect:ListPrompts," "connect:ListRules," "connect:ListSecurityKeys," "connect:ListTagsForResource," "connect:ListTaskTemplates," "connect:ListUsers," "emr-containers:DescribeVirtualCluster," "emr-containers:ListVirtualClusters," "emr-serverless:GetApplication," "emr-serverless:ListApplications," "groundstation:GetDataflowEndpointGroup," "groundstation:ListDataflowEndpointGroups," "m2:GetEnvironment," "m2:ListEnvironments," "m2:ListTagsForResource," "memorydb:DescribeAcls," "memorydb:DescribeClusters," "memorydb:DescribeParameterGroups," "memorydb:DescribeParameters," "memorydb:DescribeSubnetGroups," "organizations:ListRoots," "quicksight:DescribeAccountSubscription," "quicksight:DescribeDataSetRefreshProperties," "rds:DescribeEngineDefaultClusterParameters," "redshift:DescribeEndpointAccess," "redshift:DescribeEndpointAuthorization," "route53:GetChange," "route53:ListCidrBlocks," "route53:ListCidrLocations," "serviceCatalog:DescribePortfolioShares," "transfer:DescribeProfile," and "transfer:ListProfiles" |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Cognito, Amazon Connect Customer, Amazon EMR AWS Ground Station Modernizzazione del mainframe AWS,,, Amazon MemoryDB AWS Organizations, Amazon Quick, Amazon Relational Database Service (Amazon RDS), Amazon Redshift, Amazon Route 53 e AWS Transfer Family. AWS Service Catalog |
17 novembre 2023 |
| AWSConfigServiceRolePolicy: aggiunta di "Sid": "AWSConfigServiceRolePolicyStatementID," "Sid": "AWSConfigSLRLogStatementID," "Sid": "AWSConfigSLRLogEventStatementID," and "Sid": "AWSConfigSLRApiGatewayStatementID" |
Questa policy ora aggiunge identificatori di sicurezza (SID) per |
17 novembre 2023 |
| AWS_ConfigRole: aggiunta di "acm-pca:GetCertificateAuthorityCertificate," "appmesh:DescribeMesh," "appmesh:ListGatewayRoutes," "connect:DescribeInstance," "connect:DescribeQuickConnect," "connect:ListQuickConnects," "ecs:DescribeCapacityProviders," "evidently:GetSegment," "evidently:ListSegments," "grafana:DescribeWorkspace," "grafana:DescribeWorkspaceAuthentication," "grafana:DescribeWorkspaceConfiguration," "grafana:DescribeWorkspaceConfiguration," "guardduty:GetMemberDetectors," "inspector2:BatchGetAccountStatus," "inspector2:GetDelegatedAdminAccount," "inspector2:ListMembers," "iot:DescribeCACertificate," "iot:ListCACertificates," "iot:ListTagsForResource," "iottwinmaker:GetSyncJob," "iottwinmaker:ListSyncJobs," "kafka:ListTagsForResource," "kafkaconnect:DescribeConnector," "kafkaconnect:ListConnectors," "lambda:GetCodeSigningConfig," "lambda:ListCodeSigningConfigs," "lambda:ListTags," "networkmanager:GetConnectPeer," "organizations:DescribeOrganization," "organizations:ListTargetsForPolicy," "sagemaker:DescribeDataQualityJob," "sagemaker:DescribeModelExplainabilityJob," "sagemaker:ListDataQualityJob," and "sagemaker:ExplainabilityJob" |
Questa politica ora supporta autorizzazioni aggiuntive per AWS Private CA AWS App Mesh, Connect Customer, Amazon Elastic Container Service (Amazon ECS), Amazon CloudWatch Evidently, Amazon Managed Grafana GuardDuty, Amazon AWS IoT, Amazon Inspector AWS IoT TwinMaker,,, Amazon Managed Streaming for Apache Kafka (Amazon MSK) e Amazon SageMaker AI. AWS Lambda AWS Network Manager AWS Organizations |
4 ottobre 2023 |
| AWSConfigServiceRolePolicy: aggiunta di "acm-pca:GetCertificateAuthorityCertificate," "appmesh:DescribeMesh," "appmesh:ListGatewayRoutes," "connect:DescribeInstance," "connect:DescribeQuickConnect," "connect:ListQuickConnects," "ecs:DescribeCapacityProviders," "evidently:GetSegment," "evidently:ListSegments," "grafana:DescribeWorkspace," "grafana:DescribeWorkspaceAuthentication," "grafana:DescribeWorkspaceConfiguration," "grafana:DescribeWorkspaceConfiguration," "guardduty:GetMemberDetectors," "inspector2:BatchGetAccountStatus," "inspector2:GetDelegatedAdminAccount," "inspector2:ListMembers," "iot:DescribeCACertificate," "iot:ListCACertificates," "iot:ListTagsForResource," "iottwinmaker:GetSyncJob," "iottwinmaker:ListSyncJobs," "kafka:ListTagsForResource," "kafkaconnect:DescribeConnector," "kafkaconnect:ListConnectors," "lambda:GetCodeSigningConfig," "lambda:ListCodeSigningConfigs," "lambda:ListTags," "networkmanager:GetConnectPeer," "organizations:DescribeOrganization," "organizations:ListTargetsForPolicy," "sagemaker:DescribeDataQualityJob," "sagemaker:DescribeModelExplainabilityJob," "sagemaker:ListDataQualityJob," and "sagemaker:ExplainabilityJob" |
Questa politica ora supporta autorizzazioni aggiuntive per AWS Private CA AWS App Mesh, Connect Customer, Amazon Elastic Container Service (Amazon ECS), Amazon CloudWatch Evidently, Amazon Managed Grafana GuardDuty, Amazon AWS IoT, Amazon Inspector AWS IoT TwinMaker,,, Amazon Managed Streaming for Apache Kafka (Amazon MSK) e Amazon SageMaker AI. AWS Lambda AWS Network Manager AWS Organizations |
4 ottobre 2023 |
| AWSConfigServiceRolePolicy— Rimuovi "ssm:GetParameter" |
Questa politica ora rimuove le autorizzazioni per AWS Systems Manager (Systems Manager). |
6 settembre 2023 |
| AWS_ConfigRole: aggiunta di "appmesh:DescribeGatewayRoute","appstream:DescribeStacks", "aps:ListTagsForResource", "cloudfront:GetFunction", "cloudfront:GetOriginAccessControl", "cloudfront:ListFunctions", "cloudfront:ListOriginAccessControls", "codeartifact:ListPackages", "codeartifact:ListPackageVersions", "codebuild:BatchGetReportGroups", "codebuild:ListReportGroups", "connect:ListInstanceAttributes", "connect:ListInstances", "glue:GetPartition", "glue:GetPartitions", "guardduty:GetAdministratorAccount", "iam:ListInstanceProfileTags", "inspector2:ListFilters", "iot:DescribeJobTemplate", "iot:DescribeProvisioningTemplate", "iot:ListJobTemplates", "iot:ListProvisioningTemplates", "iottwinmaker:GetComponentType", "iottwinmaker:ListComponentTypes", "iotwireless:GetFuotaTask", "iotwireless:GetMulticastGroup", "iotwireless:ListFuotaTasks", "iotwireless:ListMulticastGroups", "kafka:ListScramSecrets", "macie2:ListTagsForResource", "mediaconnect:ListTagsForResource", "networkmanager:GetConnectPeer", "networkmanager:ListConnectPeers", "organizations:DescribeEffectivePolicy", "organizations:DescribeResourcePolicy", "resource-explorer-2:GetIndex", "resource-explorer-2:ListIndexes", "resource-explorer-2:ListTagsForResource", "route53:ListCidrCollections", "s3:GetMultiRegionAccessPointPolicy", "s3:GetMultiRegionAccessPointPolicyStatus", and "sns:GetDataProtectionPolicy" |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon AWS App Mesh AWS CloudFormation, Amazon Connect Customer CloudFront AWS CodeArtifact AWS CodeBuild, Amazon, AWS Identity and Access Management (IAM) AWS Glue GuardDuty, Amazon Inspector,,,, Amazon Managed Streaming per Apache Kafka AWS IoT TwinMaker Wireless AWS IoT, Amazon Macie,,,,, Amazon Route 53 AWS Elemental MediaConnect AWS Network Manager AWS Organizations Esploratore di risorse AWS, Amazon Simple Storage Service (Amazon S3) e Amazon Simple Notification Service (Amazon SNS). AWS IoT |
28 luglio 2023 |
| AWSConfigServiceRolePolicy: aggiunta di "appmesh:DescribeGatewayRoute", "appstream:DescribeStacks", "aps:ListTagsForResource", "cloudfront:GetFunction", "cloudfront:GetOriginAccessControl", "cloudfront:ListFunctions", "cloudfront:ListOriginAccessControls", "codeartifact:ListPackages", "codeartifact:ListPackageVersions", "codebuild:BatchGetReportGroups", "codebuild:ListReportGroups", "connect:ListInstanceAttributes", "connect:ListInstances", "glue:GetPartition", "glue:GetPartitions", "guardduty:GetAdministratorAccount", "iam:ListInstanceProfileTags", "inspector2:ListFilters", "iot:DescribeJobTemplate", "iot:DescribeProvisioningTemplate", "iot:ListJobTemplates", "iot:ListProvisioningTemplates", "iottwinmaker:GetComponentType", "iottwinmaker:ListComponentTypes", "iotwireless:GetFuotaTask", "iotwireless:GetMulticastGroup", "iotwireless:ListFuotaTasks", "iotwireless:ListMulticastGroups", "kafka:ListScramSecrets", "macie2:ListTagsForResource", "mediaconnect:ListTagsForResource", "networkmanager:GetConnectPeer", "networkmanager:ListConnectPeers", "organizations:DescribeEffectivePolicy", "organizations:DescribeResourcePolicy", "resource-explorer-2:GetIndex", "resource-explorer-2:ListIndexes", "resource-explorer-2:ListTagsForResource", "route53:ListCidrCollections", "s3:GetMultiRegionAccessPointPolicy", "s3:GetMultiRegionAccessPointPolicyStatus", "sns:GetDataProtectionPolicy", "ssm:DescribeParameters", "ssm:GetParameter", and "ssm:ListTagsForResource" |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon WorkSpaces Applications AWS App Mesh, Amazon, AWS CloudFormation, CloudFront AWS CodeArtifact, AWS CodeBuild Amazon Connect Customer,, Amazon AWS Glue GuardDuty, AWS Identity and Access Management (IAM), Amazon Inspector,, AWS IoT, AWS IoT TwinMaker Wireless AWS IoT, Amazon Managed Streaming per Apache Kafka, Amazon Macie,, AWS Elemental MediaConnect, AWS Network Manager, AWS Organizations Esploratore di risorse AWS, Amazon Route 53, Amazon Simple Storage Service (Amazon S3), Amazon Simple Notification Service (Amazon SNS) e Amazon EC2 Systems Manager (SSM). |
28 luglio 2023 |
| AWS_ConfigRole: aggiunta di "amplify:GetBranch", "amplify:ListBranches", "app-integrations:GetEventIntegration", "app-integrations:ListEventIntegrationAssociations", "app-integrations:ListEventIntegrations", "appmesh:DescribeRoute", "appmesh:ListRoutes", "aps:ListRuleGroupsNamespaces", "athena:GetPreparedStatement", "athena:ListPreparedStatements", "batch:DescribeSchedulingPolicies", "batch:ListSchedulingPolicies", "cloudformation:ListTypes", "cloudtrail:ListTrails", "codeartifact:ListDomains", "codeguru-profiler:DescribeProfilingGroup", "codeguru-profiler:GetNotificationConfiguration", "codeguru-profiler:GetPolicy", "codeguru-profiler:ListProfilingGroups", "ds:DescribeDomainControllers", “dynamodb:DescribeTableReplicaAutoScaling" "dynamodb:DescribeTimeToLive", "ec2:DescribeTrafficMirrorFilters", "evidently:GetLaunch", "evidently:ListLaunches", "forecast:DescribeDatasetGroup", "forecast:ListDatasetGroups", "greengrass:DescribeComponent", "greengrass:GetComponent", "greengrass:ListComponents", "greengrass:ListComponentVersions", "groundstation:GetMissionProfile", "groundstation:ListMissionProfiles", "iam:ListGroups", "iam:ListRoles", "kafka:DescribeConfiguration", "kafka:DescribeConfigurationRevision", "kafka:ListConfigurations", "lightsail:GetRelationalDatabases" "logs:ListTagsLogGroup", "mediaconnect:DescribeFlow", "mediaconnect:ListFlows", "mediatailor:GetPlaybackConfiguration", "mediatailor:ListPlaybackConfigurations", "mobiletargeting:GetApplicationSettings", "mobiletargeting:GetEmailTemplate", "mobiletargeting:GetEventStream", "mobiletargeting:ListTemplates", "networkmanager:GetCustomerGatewayAssociations", "networkmanager:GetLinkAssociations", "organizations:DescribeAccount", "organizations:DescribeOrganizationalUnit", "organizations:ListAccounts", "organizations:ListAccountsForParent", "organizations:ListOrganizationalUnitsForParent", "organizations:ListTagsForResource", "personalize:DescribeDataset", "personalize:DescribeDatasetGroup", "personalize:DescribeSchema", "personalize:DescribeSolution", "personalize:ListDatasetGroups", "personalize:ListDatasetImportJobs", "personalize:ListDatasets", "personalize:ListSchemas", "personalize:ListSolutions", "personalize:ListTagsForResource", "quicksight:ListTemplates", "refactor-spaces:GetEnvironment", "refactor-spaces:GetService", "refactor-spaces:ListApplications", "refactor-spaces:ListEnvironments", "refactor-spaces:ListServices", "s3:GetAccessPointPolicyStatusForObjectLambda", "sagemaker:DescribeDeviceFleet", "sagemaker:DescribeFeatureGroup", "sagemaker:ListDeviceFleets", "sagemaker:ListFeatureGroups", "sagemaker:ListModels", and "transfer:ListTagsForResource" |
Questa politica ora supporta autorizzazioni aggiuntive per AWS Amplify Amazon Connect Customer AWS App Mesh, Amazon Managed Service for Prometheus, Amazon Athena,, AWS Batch,, AWS CloudFormation AWS CloudTrail, Amazon AWS CodeArtifact,, Amazon CodeGuru Servizio di directory AWS, Amazon DynamoDB, Amazon Elastic Compute Cloud (Amazon EC2), Amazon CloudWatch Evidently AWS Organizations, Amazon Forecast,, AWS IoT Greengrass, AWS Ground Station, AWS Identity and Access Management (IAM), Amazon Managed Streaming per Apache Kafka (Amazon MSK), Amazon Lightsail, Amazon CloudWatch Logs AWS Elemental MediaConnect, AWS Elemental MediaTailor, Amazon Pinpoint, Amazon Virtual Cloud privato ( Amazon VPC), Amazon Personalize, Amazon Quick AWS Migration Hub Refactor Spaces, Amazon Simple Storage Service (Amazon S3), Amazon SageMaker AI, AWS Transfer Family. |
13 giugno 2023 |
| AWSConfigServiceRolePolicy: aggiunta di "amplify:GetBranch", "amplify:ListBranches", "app-integrations:GetEventIntegration", "app-integrations:ListEventIntegrationAssociations", "app-integrations:ListEventIntegrations", "appmesh:DescribeRoute", "appmesh:ListRoutes", "aps:ListRuleGroupsNamespaces", "athena:GetPreparedStatement", "athena:ListPreparedStatements", "batch:DescribeSchedulingPolicies", "batch:ListSchedulingPolicies", "cloudformation:ListTypes", "cloudtrail:ListTrails", "codeartifact:ListDomains", "codeguru-profiler:DescribeProfilingGroup", "codeguru-profiler:GetNotificationConfiguration", "codeguru-profiler:GetPolicy", "codeguru-profiler:ListProfilingGroups", "ds:DescribeDomainControllers", "dynamodb:DescribeTableReplicaAutoScaling", "dynamodb:DescribeTimeToLive", "ec2:DescribeTrafficMirrorFilters", "evidently:GetLaunch", "evidently:ListLaunches", "forecast:DescribeDatasetGroup", "forecast:ListDatasetGroups", "greengrass:DescribeComponent", "greengrass:GetComponent", "greengrass:ListComponents", "greengrass:ListComponentVersions", "groundstation:GetMissionProfile", "groundstation:ListMissionProfiles", "iam:ListGroups", "iam:ListRoles", "kafka:DescribeConfiguration", "kafka:DescribeConfigurationRevision", "kafka:ListConfigurations", "lightsail:GetRelationalDatabases", "logs:ListTagsLogGroup", "mediaconnect:DescribeFlow", "mediaconnect:ListFlows", "mediatailor:GetPlaybackConfiguration", "mediatailor:ListPlaybackConfigurations", "mobiletargeting:GetApplicationSettings", "mobiletargeting:GetEmailTemplate", "mobiletargeting:GetEventStream", "mobiletargeting:ListTemplates", "networkmanager:GetCustomerGatewayAssociations", "networkmanager:GetLinkAssociations", "organizations:DescribeAccount", "organizations:DescribeOrganizationalUnit", "organizations:ListAccounts", "organizations:ListAccountsForParent", "organizations:ListOrganizationalUnitsForParent", "organizations:ListTagsForResource", "personalize:DescribeDataset", "personalize:DescribeDatasetGroup", "personalize:DescribeSchema", "personalize:DescribeSolution", "personalize:ListDatasetGroups", "personalize:ListDatasetImportJobs", "personalize:ListDatasets", "personalize:ListSchemas", "personalize:ListSolutions", "personalize:ListTagsForResource", "quicksight:ListTemplates", "refactor-spaces:GetEnvironment", "refactor-spaces:GetService", "refactor-spaces:ListApplications", "refactor-spaces:ListEnvironments", "refactor-spaces:ListServices", "s3:GetAccessPointPolicyStatusForObjectLambda", "sagemaker:DescribeDeviceFleet", "sagemaker:DescribeFeatureGroup", "sagemaker:ListDeviceFleets", "sagemaker:ListFeatureGroups", "sagemaker:ListModels", and "transfer:ListTagsForResource" |
Questa politica ora supporta autorizzazioni aggiuntive per AWS Amplify Amazon Connect Customer AWS App Mesh, Amazon Managed Service for Prometheus, Amazon Athena,, AWS Batch,, AWS CloudFormation AWS CloudTrail, Amazon AWS CodeArtifact,, Amazon CodeGuru Servizio di directory AWS, Amazon DynamoDB, Amazon Elastic Compute Cloud (Amazon EC2), Amazon CloudWatch Evidently AWS Organizations, Amazon Forecast,, AWS IoT Greengrass, AWS Ground Station, AWS Identity and Access Management (IAM), Amazon Managed Streaming per Apache Kafka (Amazon MSK), Amazon Lightsail, Amazon CloudWatch Logs AWS Elemental MediaConnect, AWS Elemental MediaTailor, Amazon Pinpoint, Amazon Virtual Cloud privato ( Amazon VPC), Amazon Personalize, Amazon Quick AWS Migration Hub Refactor Spaces, Amazon Simple Storage Service (Amazon S3), Amazon SageMaker AI, AWS Transfer Family. |
13 giugno 2023 |
| AWSConfigServiceRolePolicy: aggiunta di amplify:GetApp, amplify:ListApps, appmesh:DescribeVirtualGateway, appmesh:DescribeVirtualNode, appmesh:DescribeVirtualRouter, appmesh:DescribeVirtualService, appmesh:ListMeshes, appmesh:ListTagsForResource, appmesh:ListVirtualGateways, appmesh:ListVirtualNodes, appmesh:ListVirtualRouters, appmesh:ListVirtualServices, apprunner:DescribeVpcConnector, apprunner:ListVpcConnectors, cloudformation:ListTypes, cloudfront:ListResponseHeadersPolicies, codeartifact:ListRepositories, ds:DescribeEventTopics, ds:ListLogSubscriptions, GetInstanceTypesFromInstanceRequirement ec2:GetManagedPrefixListEntries, kendra:DescribeIndex, kendra:ListIndices, kendra:ListTagsForResource, logs:DescribeDestinations, logs:GetDataProtectionPolicy, macie2:DescribeOrganizationConfiguration, macie2:GetAutomatedDiscoveryConfiguration, macie2:GetClassificationExportConfiguration, macie2:GetCustomDataIdentifier, macie2:GetFindingsPublicationConfiguration, macie2:ListCustomDataIdentifiers, mobiletargeting:GetEmailChannel, refactor-spaces:GetEnvironment, refactor-spaces:ListEnvironments, resiliencehub:ListTagsForResource, route53:GetDNSSEC, sagemaker:DescribeDomain, sagemaker:DescribeModelBiasJobDefinition, sagemaker:DescribeModelQualityJobDefinition, sagemaker:DescribePipeline, sagemaker:DescribeProject, sagemaker:ListDomains, sagemaker:ListModelBiasJobDefinitions, sagemaker:ListModelQualityJobDefinitions, sagemaker:ListPipelines, sagemaker:ListProjects, transfer:DescribeAgreement, transfer:DescribeCertificate, transfer:ListAgreements, transfer:ListCertificates, and waf-regional:ListLoggingConfigurations |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Managed Workflows per AWS Amplify,, Amazon AWS App Mesh, AWS App Runner CloudFront, Amazon Elastic Compute Cloud AWS CodeArtifact, Amazon Kendra, Amazon Macie, Amazon Route 53, Amazon SageMaker AI, Amazon Pinpoint, Resilience Hub AWS Transfer Family, Amazon, Directory Service e. AWS Migration Hub AWS CloudWatch AWS AWS WAF |
13 aprile 2023 |
| AWS_ConfigRole: aggiunta di amplify:GetApp, amplify:ListApps, appmesh:DescribeVirtualGateway, appmesh:DescribeVirtualNode, appmesh:DescribeVirtualRouter, appmesh:DescribeVirtualService, appmesh:ListMeshes, appmesh:ListTagsForResource, appmesh:ListVirtualGateways, appmesh:ListVirtualNodes, appmesh:ListVirtualRouters, appmesh:ListVirtualServices, apprunner:DescribeVpcConnector, apprunner:ListVpcConnectors, cloudformation:ListTypes, cloudfront:ListResponseHeadersPolicies, codeartifact:ListRepositories, ds:DescribeEventTopics, ds:ListLogSubscriptions, ec2:GetInstanceTypesFromInstanceRequirement, ec2:GetManagedPrefixListEntries, kendra:DescribeIndex, kendra:ListIndices, kendra:ListTagsForResource, logs:DescribeDestinations, logs:GetDataProtectionPolicy, macie2:DescribeOrganizationConfiguration, macie2:GetAutomatedDiscoveryConfiguration, macie2:GetClassificationExportConfiguration, macie2:GetCustomDataIdentifier, macie2:GetFindingsPublicationConfiguration, macie2:ListCustomDataIdentifiers, mobiletargeting:GetEmailChannel, refactor-spaces:GetEnvironment, refactor-spaces:ListEnvironments, resiliencehub:ListTagsForResource, route53:GetDNSSEC, sagemaker:DescribeDomain, sagemaker:DescribeModelBiasJobDefinition, sagemaker:DescribeModelQualityJobDefinition, sagemaker:DescribePipeline, sagemaker:DescribeProject, sagemaker:ListDomains, sagemaker:ListModelBiasJobDefinitions, sagemaker:ListModelQualityJobDefinitions, sagemaker:ListPipelines, sagemaker:ListProjects, transfer:DescribeAgreement, transfer:DescribeCertificate, transfer:ListAgreements, transfer:ListCertificates, and waf-regional:ListLoggingConfigurations |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Managed Workflows per Amazon AWS Amplify AWS App Mesh AWS App Runner, CloudFront AWS CodeArtifact, Amazon Elastic Compute Cloud, Amazon Kendra, Amazon Macie, Amazon Route 53, Amazon SageMaker AI, Amazon Pinpoint AWS Transfer Family, AWS Migration Hub AWS Resilience Hub, Amazon, Amazon CloudWatch, AWS Directory Service e AWS WAF. |
13 aprile 2023 |
| AWSConfigServiceRolePolicy: aggiunta di appflow:DescribeFlow, appflow:ListFlows, appflow:ListTagsForResource, apprunner:DescribeService, apprunner:ListServices, apprunner:ListTagsForResource, appstream:DescribeApplications, appstream:DescribeFleets, cloudfront:GetResponseHeadersPolicy, cloudwatch:ListTagsForResource, codeartifact:DescribeRepository, codeartifact:GetRepositoryPermissionsPolicy, codeartifact:ListTagsForResource, codecommit:GetRepository, codecommit:GetRepositoryTriggers, codecommit:ListRepositories, codecommit:ListTagsForResource, devicefarm:GetInstanceProfile, devicefarm:ListInstanceProfiles, devicefarm:ListProjects, evidently:GetProject, evidently:ListProjects, evidently:ListTagsForResource, forecast:DescribeDataset, forecast:ListDatasets, forecast:ListTagsForResource, groundstation:GetConfig, groundstation:ListConfigs, groundstation:ListTagsForResource, iam:GetInstanceProfile, iam:GetSAMLProvider, iam:GetServerCertificate, iam:ListAccessKeys, iam:ListGroups, iam:ListInstanceProfiles, iam:ListMFADevices, iam:ListMFADeviceTags, iam:ListRoles, iam:ListSAMLProviders, iot:DescribeFleetMetric, iot:ListFleetMetrics, memorydb:DescribeUsers, memorydb:ListTags, mobiletargeting:GetApp, mobiletargeting:GetCampaigns, networkmanager:GetDevices, networkmanager:GetLinks, networkmanager:GetSites, panorama:ListNodes, rds:DescribeDBProxyEndpoints, redshift:DescribeScheduledActions, sagemaker:DescribeAppImageConfig, sagemaker:DescribeImage, sagemaker:DescribeImageVersion, sagemaker:ListAppImageConfigs, sagemaker:ListImages, and sagemaker:ListImageVersions |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Managed Workflows for Amazon AppFlow AWS App Runner, Amazon WorkSpaces Applications, Amazon CloudFront, Amazon CloudWatch, AWS CodeArtifact, AWS CodeCommit, AWS Device Farm, Amazon CloudWatch Evidently, Amazon Forecast AWS Ground Station,, AWS Identity and Access Management (IAM) AWS IoT, Amazon MemoryDB, Amazon Pinpoint AWS Network Manager, AWS Panorama,, Amazon Relational Database Service (Amazon RDS), Amazon Redshift e Amazon SageMaker AI. |
30 marzo 2023 |
| AWS_ConfigRole: aggiunta di appflow:DescribeFlow, appflow:ListFlows, appflow:ListTagsForResource, apprunner:DescribeService, apprunner:ListServices, apprunner:ListTagsForResource, appstream:DescribeApplications, appstream:DescribeFleets, cloudformation:ListTypes, cloudfront:GetResponseHeadersPolicy, cloudfront:ListDistributions, cloudwatch:ListTagsForResource, codeartifact:DescribeRepository, codeartifact:GetRepositoryPermissionsPolicy, codeartifact:ListTagsForResource, codecommit:GetRepository, codecommit:GetRepositoryTriggers, codecommit:ListRepositories, codecommit:ListTagsForResource, devicefarm:GetInstanceProfile, devicefarm:ListInstanceProfiles, devicefarm:ListProjects, ec2:DescribeTrafficMirrorFilters, evidently:GetProject, evidently:ListProjects, evidently:ListTagsForResource, forecast:DescribeDataset, forecast:ListDatasets, forecast:ListTagsForResource, groundstation:GetConfig, groundstation:ListConfigs, groundstation:ListTagsForResource, iam:GetInstanceProfile, iam:GetSAMLProvider, iam:GetServerCertificate, iam:ListAccessKeys, iam:ListGroups, iam:ListInstanceProfiles, iam:ListMFADevices, iam:ListMFADeviceTags, iam:ListRoles, iam:ListSAMLProviders, iot:DescribeFleetMetric, iot:ListFleetMetrics, memorydb:DescribeUsers, memorydb:ListTags, mobiletargeting:GetApp, mobiletargeting:GetCampaigns, networkmanager:GetDevices, networkmanager:GetLinks, networkmanager:GetSites, panorama:ListNodes, rds:DescribeDBProxyEndpoints, redshift:DescribeScheduledActions, sagemaker:DescribeAppImageConfig, sagemaker:DescribeImage, sagemaker:DescribeImageVersion, sagemaker:ListAppImageConfigs, sagemaker:ListImages, and sagemaker:ListImageVersions |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Managed Workflows for Amazon AppFlow AWS App Runner, Amazon WorkSpaces Applications, AWS CloudFormation, Amazon CloudFront, Amazon CloudWatch,, AWS CodeArtifact, AWS CodeCommit AWS Device Farm, Amazon Elastic Compute Cloud (Amazon EC2), Amazon CloudWatch Evidently, Amazon Forecast AWS Ground Station,, AWS Identity and Access Management (IAM) AWS IoT, Amazon MemoryDB, Amazon Pinpoint, AWS Network Manager, AWS Panorama,, Amazon Relational Database Service (Amazon RDS), Amazon Redshift e Amazon SageMaker AI. |
30 marzo 2023 |
|
AWSConfigRulesExecutionRole— inizia a tracciare le modifiche AWS per questa AWS Config policy gestita |
Questa policy consente alle AWS Lambda funzioni di accedere all' AWS Config API e agli snapshot di configurazione che vengono AWS Config distribuiti periodicamente ad Amazon S3. Questo accesso è richiesto dalle funzioni che valutano le modifiche alla configurazione per le regole Lambda AWS personalizzate. |
7 marzo 2023 |
|
AWSConfigRoleForOrganizations— AWS Config inizia a tenere traccia delle modifiche per questa policy AWS gestita |
Questa policy consente di AWS Config chiamare API di sola lettura AWS Organizations . |
7 marzo 2023 |
|
AWSConfigRemediationServiceRolePolicy— AWS Config inizia a tenere traccia delle modifiche per questa policy gestita AWS |
Questa politica consente di AWS Config correggere le |
7 marzo 2023 |
|
AWSConfigServiceRolePolicy: aggiunta di auditmanager:GetAccountStatus |
Questa policy ora concede l'autorizzazione per restituire lo stato di registrazione di un account in AWS Audit Manager. |
3 marzo 2023 |
|
AWS_ConfigRole: aggiunta di auditmanager:GetAccountStatus |
Questa policy ora concede l'autorizzazione per restituire lo stato di registrazione di un account in AWS Audit Manager. |
3 marzo 2023 |
|
AWSConfigMultiAccountSetupPolicy— AWS Config inizia a tenere traccia delle modifiche per questa politica AWS gestita |
Questa politica consente di AWS Config chiamare AWS i servizi e distribuire AWS Config risorse in un'organizzazione con AWS Organizations. |
27 febbraio 2023 |
|
AWSConfigServiceRolePolicy: aggiunta di airflow:ListTagsForResource, iot:ListCustomMetrics, iot:DescribeCustomMetric, appstream:DescribeDirectoryConfigs, appstream:ListTagsForResource, codeguru-reviewer:DescribeRepositoryAssociation, codeguru-reviewer:ListRepositoryAssociations, healthlake:ListFHIRDatastores, healthlake:DescribeFHIRDatastore, healthlake:ListTagsForResource, kinesisvideo:DescribeStream, kinesisvideo:ListStreams, kinesisvideo:ListTagsForStream, kinesisvideo:DescribeSignalingChannel, kinesisvideo:ListTagsForResource, kinesisvideo:ListSignalingChannels, route53-recovery-control-config:DescribeCluster, route53-recovery-control-config:DescribeRoutingControl, route53-recovery-control-config:DescribeSafetyRule, route53-recovery-control-config:ListClusters, route53-recovery-control-config:ListRoutingControls, route53-recovery-control-config:ListSafetyRules, devicefarm:GetTestGridProject, devicefarm:ListTestGridProjects, ec2:DescribeCapacityReservationFleets, ec2:DescribeIpamPools, ec2:DescribeIpams, ec2:GetInstanceTypesFromInstanceRequirement, mobiletargeting:GetApplicationSettings, mobiletargeting:ListTagsForResource, ecr:BatchGetRepositoryScanningConfiguration, iam:ListServerCertificates, guardduty:ListPublishingDestinations, guardduty:DescribePublishingDestination, logs:GetLogDelivery, and logs:ListLogDeliveries |
Questa policy ora supporta autorizzazioni aggiuntive per Amazon Managed Workflows for Apache Airflow, Amazon WorkSpaces Applications AWS IoT, Amazon CodeGuru Reviewer, Amazon Kinesis Video Streams AWS HealthLake, Amazon Application Recovery Controller (ARC), Amazon Elastic Compute Cloud (Amazon EC2) AWS Device Farm, Amazon Pinpoint, (IAM), Amazon e Amazon Logs. AWS Identity and Access Management GuardDuty CloudWatch |
1 febbraio 2023 |
|
AWS_ConfigRole: aggiunta di airflow:ListTagsForResource, iot:ListCustomMetrics, iot:DescribeCustomMetric, appstream:DescribeDirectoryConfigs, appstream:ListTagsForResource, codeguru-reviewer:DescribeRepositoryAssociation, codeguru-reviewer:ListRepositoryAssociations, healthlake:ListFHIRDatastores, healthlake:DescribeFHIRDatastore, healthlake:ListTagsForResource, kinesisvideo:DescribeStream, kinesisvideo:ListStreams, kinesisvideo:ListTagsForStream, kinesisvideo:DescribeSignalingChannel, kinesisvideo:ListTagsForResource, kinesisvideo:ListSignalingChannels, route53-recovery-control-config:DescribeCluster, route53-recovery-control-config:DescribeRoutingControl, route53-recovery-control-config:DescribeSafetyRule, route53-recovery-control-config:ListClusters, route53-recovery-control-config:ListRoutingControls, route53-recovery-control-config:ListSafetyRules, devicefarm:GetTestGridProject, devicefarm:ListTestGridProjects, ec2:DescribeCapacityReservationFleets, ec2:DescribeIpamPools, ec2:DescribeIpams, ec2:GetInstanceTypesFromInstanceRequirement, mobiletargeting:GetApplicationSettings, mobiletargeting:ListTagsForResource, ecr:BatchGetRepositoryScanningConfiguration, iam:ListServerCertificates, guardduty:ListPublishingDestinations, guardduty:DescribePublishingDestination, logs:GetLogDelivery, and logs:ListLogDeliveries |
Questa policy ora supporta autorizzazioni aggiuntive per Amazon Managed Workflows for Apache Airflow AWS IoT, Amazon WorkSpaces Applications, Amazon CodeGuru Reviewer AWS HealthLake, Amazon Kinesis Video Streams, Amazon Application Recovery Controller (ARC) AWS Device Farm, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Pinpoint, AWS Identity and Access Management (IAM) GuardDuty, Amazon e Amazon CloudWatch Logs. |
1 febbraio 2023 |
|
ConfigConformsServiceRolePolicy: aggiornamento di config:DescribeConfigRules |
Come best practice di sicurezza, questa policy ora rimuove l'autorizzazione ampia a livello di risorsa per |
12 gennaio 2023 |
|
AWSConfigServiceRolePolicy: aggiunta di APS:DescribeRuleGroupsNamespace, APS:DescribeWorkspace, APS:ListWorkspaces, auditmanager:GetAssessment, auditmanager:ListAssessments, devicefarm:GetNetworkProfile, AWS Transfer Family devicefarm:GetProject, devicefarm:ListNetworkProfiles, devicefarm:ListTagsForResource, dms:DescribeEndpoints, ds:ListTagsForResource, ec2:DescribeTags, ec2:DescribeTrafficMirrorSessions, ec2:DescribeTrafficMirrorTargets, ec2:GetIpamPoolAllocations, ec2:GetIpamPoolCidrs, glue:GetMLTransform, glue:GetMLTransforms, glue:ListMLTransforms, iot:DescribeScheduledAudit, iot:ListScheduledAudits, ivs:GetChannel, lightsail:GetRelationalDatabases, mediapackage-vod:DescribePackagingConfiguration, mediapackage-vod:ListPackagingConfigurations, networkmanager:DescribeGlobalNetworks, networkmanager:GetTransitGatewayRegistrations, networkmanager:ListTagsForResource, quicksight:DescribeDashboard, quicksight:DescribeDashboardPermissions, quicksight:DescribeTemplate, quicksight:DescribeTemplatePermissions, quicksight:ListDashboards, quicksight:ListTemplates, ram:ListResources, route53-recovery-control-config:DescribeControlPanel, route53-recovery-control-config:ListControlPanels, route53-recovery-control-config:ListTagsForResource, route53resolver:GetResolverQueryLogConfigAssociation, route53resolver:ListResolverQueryLogConfigAssociations, s3:GetAccessPointForObjectLambda, s3:GetAccessPointPolicyForObjectLambda, s3:GetAccessPointPolicyStatusForObjectLambda, s3:GetMultiRegionAccessPoint, s3:ListAccessPointsForObjectLambda, s3:ListMultiRegionAccessPoints, timestream:DescribeEndpoints, transfer:DescribeConnector, transfer:ListConnectors, and transfer:ListTagsForResource |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Managed Service for Prometheus,, AWS Audit Manager, AWS Device Farm, Servizio di directory AWS, AWS Database Migration Service Amazon Elastic Compute Cloud (Amazon EC2),, AWS Glue, Amazon Lightsail AWS IoT,,, Amazon Quick AWS Elemental MediaPackage AWS Network Manager AWS Resource Access Manager, Amazon Application Recovery Controller (ARC), Amazon Simple Storage Service (Amazon S3) e Amazon Timestream.AWS DMS |
15 dicembre 2022 |
|
AWS_ConfigRole: aggiunta di APS:DescribeRuleGroupsNamespace, APS:DescribeWorkspace, APS:ListWorkspaces, auditmanager:GetAssessment, auditmanager:ListAssessments, devicefarm:GetNetworkProfile, devicefarm:GetProject, devicefarm:ListNetworkProfiles, devicefarm:ListTagsForResource, dms:DescribeEndpoints, ds:ListTagsForResource, ec2:DescribeTags, ec2:DescribeTrafficMirrorSessions, ec2:DescribeTrafficMirrorTargets, ec2:GetIpamPoolAllocations, ec2:GetIpamPoolCidrs, glue:GetMLTransform, glue:GetMLTransforms, glue:ListMLTransforms, iot:DescribeScheduledAudit, iot:ListScheduledAudits, ivs:GetChannel, lightsail:GetRelationalDatabases, mediapackage-vod:DescribePackagingConfiguration, mediapackage-vod:ListPackagingConfigurations, networkmanager:DescribeGlobalNetworks, networkmanager:GetTransitGatewayRegistrations, networkmanager:ListTagsForResource, quicksight:DescribeDashboard, quicksight:DescribeDashboardPermissions, quicksight:DescribeTemplate, quicksight:DescribeTemplatePermissions, quicksight:ListDashboards, quicksight:ListTemplates, ram:ListResources, route53-recovery-control-config:DescribeControlPanel, route53-recovery-control-config:ListControlPanels, route53-recovery-control-config:ListTagsForResource, route53resolver:GetResolverQueryLogConfigAssociation, route53resolver:ListResolverQueryLogConfigAssociations, s3:GetAccessPointForObjectLambda, s3:GetAccessPointPolicyForObjectLambda, s3:GetAccessPointPolicyStatusForObjectLambda, s3:GetMultiRegionAccessPoint, s3:ListAccessPointsForObjectLambda, s3:ListMultiRegionAccessPoints, timestream:DescribeEndpoints, transfer:DescribeConnector, transfer:ListConnectors, and transfer:ListTagsForResource |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Managed Service for Prometheus,, AWS Audit Manager, AWS Device Farm, Servizio di directory AWS, AWS Database Migration Service Amazon Elastic Compute Cloud (Amazon EC2),, AWS Glue, Amazon Lightsail AWS IoT,,, Amazon Quick AWS Elemental MediaPackage AWS Network Manager AWS Resource Access Manager, Amazon Application Recovery Controller (ARC), Amazon Simple Storage Service (Amazon S3) e Amazon Timestream.AWS DMS |
15 dicembre 2022 |
|
AWSConfigServiceRolePolicy: aggiunta di cloudformation:ListStackResources and cloudformation:ListStacks |
Questa politica ora concede l'autorizzazione a restituire le descrizioni di tutte le risorse di uno AWS CloudFormation stack specificato e restituire le informazioni di riepilogo per gli stack il cui stato corrisponde a quello specificatoStackStatusFilter. |
7 novembre 2022 |
|
AWS_ConfigRole: aggiunta di cloudformation:ListStackResources and cloudformation:ListStacks |
Questa politica ora concede l'autorizzazione a restituire le descrizioni di tutte le risorse di uno AWS CloudFormation stack specificato e a restituire le informazioni di riepilogo per gli stack il cui stato corrisponde a quello specificato. StackStatusFilter |
7 novembre 2022 |
|
AWSConfigServiceRolePolicy: aggiunta di acm-pca:GetCertificateAuthorityCsr, acm-pca:ListCertificateAuthorities, acm-pca:ListTags, airflow:GetEnvironment, airflow:ListEnvironments, amplifyuibuilder:ListThemes, appconfig:ListConfigurationProfiles, appconfig:ListDeployments, appconfig:ListDeploymentStrategies, appconfig:ListEnvironments, appconfig:ListHostedConfigurationVersions, cassandra:Select, cloudwatch:DescribeAnomalyDetectors, cloudwatch:GetDashboard, cloudwatch:ListDashboards, connect:DescribePhoneNumber, connect:ListPhoneNumbers, connect:ListPhoneNumbersV2, connect:SearchAvailablePhoneNumbers, databrew:DescribeDataset, databrew:DescribeJob, databrew:DescribeProject, databrew:DescribeRecipe, databrew:DescribeRuleset, databrew:DescribeSchedule, databrew:ListDatasets, databrew:ListJobs, databrew:ListProjects, databrew:ListRecipes, databrew:ListRecipeVersions, databrew:ListRulesets, databrew:ListSchedules, ec2:DescribeRouteTables, eks:DescribeAddon, eks:DescribeIdentityProviderConfig, eks:ListAddons, eks:ListIdentityProviderConfigs, events:DescribeConnection, events:ListApiDestinations, events:ListConnections, fis:GetExperimentTemplate, fis:ListExperimentTemplates, frauddetector:GetRules, fsx:DescribeBackups, fsx:DescribeSnapshots, fsx:DescribeStorageVirtualMachines, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeVpcPeeringConnections, geo:ListGeofenceCollections, geo:ListPlaceIndexes, geo:ListRouteCalculators, geo:ListTrackers, iot:DescribeAccountAuditConfiguration, iot:DescribeAuthorizer, iot:DescribeDomainConfiguration, iot:DescribeMitigationAction, iot:ListAuthorizers, iot:ListDomainConfigurations, iot:ListMitigationActions, iotsitewise:DescribeAssetModel, iotsitewise:DescribeDashboard, iotsitewise:DescribeGateway, iotsitewise:DescribePortal, iotsitewise:DescribeProject, iotsitewise:ListAssetModels, iotsitewise:ListDashboards, iotsitewise:ListGateways, iotsitewise:ListPortals, iotsitewise:ListProjectAssets, iotsitewise:ListProjects, iotsitewise:ListTagsForResource, iotwireless:GetServiceProfile, iotwireless:GetWirelessDevice, iotwireless:GetWirelessGatewayTaskDefinition, iotwireless:ListServiceProfiles, iotwireless:ListTagsForResource, iotwireless:ListWirelessDevices, iotwireless:ListWirelessGatewayTaskDefinitions, lex:DescribeBotVersion, lex:ListBotVersions, lightsail:GetContainerServices, lightsail:GetDistributions, lightsail:GetRelationalDatabase, lightsail:GetRelationalDatabaseParameters, mobiletargeting:GetApps, mobiletargeting:GetCampaign, mobiletargeting:GetSegment, mobiletargeting:GetSegments, opsworks:DescribeInstances, opsworks:DescribeTimeBasedAutoScaling, opsworks:DescribeVolumes, panorama:DescribeApplicationInstance, panorama:DescribeApplicationInstanceDetails, panorama:DescribePackage, panorama:DescribePackageVersion, panorama:ListApplicationInstances, panorama:ListPackages, quicksight:ListDataSources, ram:ListResourceSharePermissions, rds:DescribeDBProxies, rds:DescribeGlobalClusters, rekognition:ListStreamProcessors, resource-groups:GetGroup, resource-groups:GetGroupConfiguration, resource-groups:GetGroupQuery, resource-groups:GetTags, resource-groups:ListGroupResources, resource-groups:ListGroups, robomaker:ListRobotApplications, robomaker:ListSimulationApplications, route53resolver:GetResolverDnssecConfig, route53resolver:ListResolverDnssecConfigs, s3:ListStorageLensConfigurations, schemas:GetResourcePolicy, servicediscovery:ListInstances, sts:GetCallerIdentity, synthetics:GetGroup, synthetics:ListAssociatedGroups, synthetics:ListGroupResources, and synthetics:ListGroups |
Questa politica ora supporta autorizzazioni aggiuntive per AWS Certificate Manager Amazon Managed Workflow per Apache Airflow, AWS Amplify AWS AppConfig, Amazon Keyspaces, Amazon CloudWatch, Connect Customer, AWS Glue DataBrew, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Elastic Kubernetes Service (Amazon EKS), Amazon EventBridge, Amazon AWS Fault Injection Service, Amazon Fraud Detector, Amazon FSx, Amazon GameLift Servers AWS IoT, Amazon Location Service, Amazon Lex, Amazon Lightsail OpsWorks, Amazon Pinpoint AWS Panorama AWS Resource Access Manager, Amazon Quick, Amazon Relational Servizio di database (Amazon RDS), Amazon Rekognition,, AWS RoboMaker AWS Resource Groups, Amazon Route 53, Amazon Simple Storage Service (Amazon S3) e Servizio di token di sicurezza AWS. AWS Cloud Map |
19 ottobre 2022 |
|
AWS_ConfigRole: aggiunta di acm-pca:GetCertificateAuthorityCsr, acm-pca:ListCertificateAuthorities, acm-pca:ListTags, airflow:GetEnvironment, airflow:ListEnvironments, amplifyuibuilder:ListThemes, appconfig:ListConfigurationProfiles, appconfig:ListDeployments, appconfig:ListDeploymentStrategies, appconfig:ListEnvironments, appconfig:ListHostedConfigurationVersions, cassandra:Select, cloudwatch:DescribeAnomalyDetectors, cloudwatch:GetDashboard, cloudwatch:ListDashboards, connect:DescribePhoneNumber, connect:ListPhoneNumbers, connect:ListPhoneNumbersV2, connect:SearchAvailablePhoneNumbers, databrew:DescribeDataset, databrew:DescribeJob, databrew:DescribeProject, databrew:DescribeRecipe, databrew:DescribeRuleset, databrew:DescribeSchedule, databrew:ListDatasets, databrew:ListJobs, databrew:ListProjects, databrew:ListRecipes, databrew:ListRecipeVersions, databrew:ListRulesets, databrew:ListSchedules, ec2:DescribeRouteTables, eks:DescribeAddon, eks:DescribeIdentityProviderConfig, eks:ListAddons, eks:ListIdentityProviderConfigs, events:DescribeConnection, events:ListApiDestinations, events:ListConnections, fis:GetExperimentTemplate, fis:ListExperimentTemplates, frauddetector:GetRules, fsx:DescribeBackups, fsx:DescribeSnapshots, fsx:DescribeStorageVirtualMachines, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeVpcPeeringConnections, geo:ListGeofenceCollections, geo:ListPlaceIndexes, geo:ListRouteCalculators, geo:ListTrackers, iot:DescribeAccountAuditConfiguration, iot:DescribeAuthorizer, iot:DescribeDomainConfiguration, iot:DescribeMitigationAction, iot:ListAuthorizers, iot:ListDomainConfigurations, iot:ListMitigationActions, iotsitewise:DescribeAssetModel, iotsitewise:DescribeDashboard, iotsitewise:DescribeGateway, iotsitewise:DescribePortal, iotsitewise:DescribeProject, iotsitewise:ListAssetModels, iotsitewise:ListDashboards, iotsitewise:ListGateways, iotsitewise:ListPortals, iotsitewise:ListProjectAssets, iotsitewise:ListProjects, iotsitewise:ListTagsForResource, iotwireless:GetServiceProfile, iotwireless:GetWirelessDevice, iotwireless:GetWirelessGatewayTaskDefinition, iotwireless:ListServiceProfiles, iotwireless:ListTagsForResource, iotwireless:ListWirelessDevices, iotwireless:ListWirelessGatewayTaskDefinitions, lex:DescribeBotVersion, lex:ListBotVersions, lightsail:GetContainerServices, lightsail:GetDistributions, lightsail:GetRelationalDatabase, lightsail:GetRelationalDatabaseParameters, mobiletargeting:GetApps, mobiletargeting:GetCampaign, mobiletargeting:GetSegment, mobiletargeting:GetSegments, opsworks:DescribeInstances, opsworks:DescribeTimeBasedAutoScaling, opsworks:DescribeVolumes, panorama:DescribeApplicationInstance, panorama:DescribeApplicationInstanceDetails, panorama:DescribePackage, panorama:DescribePackageVersion, panorama:ListApplicationInstances, panorama:ListPackages, quicksight:ListDataSources, ram:ListResourceSharePermissions, rds:DescribeDBProxies, rds:DescribeGlobalClusters, rekognition:ListStreamProcessors, resource-groups:GetGroup, resource-groups:GetGroupConfiguration, resource-groups:GetGroupQuery, resource-groups:GetTags, resource-groups:ListGroupResources, resource-groups:ListGroups, robomaker:ListRobotApplications, robomaker:ListSimulationApplications, route53resolver:GetResolverDnssecConfig, route53resolver:ListResolverDnssecConfigs, s3:ListStorageLensConfigurations, schemas:GetResourcePolicy, servicediscovery:ListInstances, sts:GetCallerIdentity, synthetics:GetGroup, synthetics:ListAssociatedGroups, synthetics:ListGroupResources, and synthetics:ListGroups |
Questa politica ora supporta autorizzazioni aggiuntive per AWS Certificate Manager Amazon Managed Workflow per Apache Airflow, AWS Amplify AWS AppConfig, Amazon Keyspaces, Amazon CloudWatch, Connect Customer, AWS Glue DataBrew, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Elastic Kubernetes Service (Amazon EKS), Amazon EventBridge, Amazon AWS Fault Injection Service, Amazon Fraud Detector, Amazon FSx, Amazon GameLift Servers AWS IoT, Amazon Location Service, Amazon Lex, Amazon Lightsail OpsWorks, Amazon Pinpoint AWS Panorama AWS Resource Access Manager, Amazon Quick, Amazon Relational Servizio di database (Amazon RDS), Amazon Rekognition,, AWS RoboMaker AWS Resource Groups, Amazon Route 53, Amazon Simple Storage Service (Amazon S3) e Servizio di token di sicurezza AWS. AWS Cloud Map |
19 ottobre 2022 |
|
AWSConfigServiceRolePolicy: aggiunta di Glue::GetTable |
Questa policy ora concede l'autorizzazione a recuperare la definizione della AWS Glue tabella in un catalogo dati per una tabella specificata. |
14 settembre 2022 |
|
AWS_ConfigRole: aggiunta di Glue::GetTable |
Questa politica ora concede l'autorizzazione a recuperare la definizione della AWS Glue tabella in un catalogo dati per una tabella specificata. |
14 settembre 2022 |
|
AWSConfigServiceRolePolicy: aggiunta di appconfig:ListApplications, appflow:DescribeConnectorProfiles, appsync:GetApiCache, autoscaling-plans:DescribeScalingPlanResources, autoscaling-plans:DescribeScalingPlans, autoscaling-plans:GetScalingPlanResourceForecastData, autoscaling:DescribeWarmPool, backup:DescribeFramework, backup:DescribeReportPlan, backup:ListFrameworks, backup:ListReportPlans, budgets:DescribeBudgetAction, budgets:DescribeBudgetActionsForAccount, budgets:DescribeBudgetActionsForBudget, budgets:ViewBudget, ce:GetAnomalyMonitors, ce:GetAnomalySubscriptions, cloud9:DescribeEnvironmentMemberships, cloud9:DescribeEnvironments, cloud9:ListEnvironments, cloud9:ListTagsForResource, cloudwatch:GetMetricStream, cloudwatch:ListMetricStreams, datasync:DescribeLocationFsxWindows, devops-guru:GetResourceCollection, ds:DescribeDirectories, ec2:DescribeTrafficMirrorFilters, ec2:DescribeTrafficMirrorTargets, ec2:GetNetworkInsightsAccessScopeAnalysisFindings, ec2:GetNetworkInsightsAccessScopeContent, elasticmapreduce:DescribeStudio, elasticmapreduce:GetStudioSessionMapping, elasticmapreduce:ListStudios, elasticmapreduce:ListStudioSessionMappings, events:DescribeEndpoint, events:DescribeEventBus, events:DescribeRule, events:ListArchives, events:ListEndpoints, events:ListEventBuses, events:ListRules, events:ListTagsForResource, events:ListTargetsByRule, finspace:GetEnvironment, finspace:ListEnvironments, frauddetector:GetDetectors, frauddetector:GetDetectorVersion, frauddetector:GetEntityTypes, frauddetector:GetEventTypes, frauddetector:GetExternalModels, frauddetector:GetLabels, frauddetector:GetModels, frauddetector:GetOutcomes, frauddetector:GetVariables, frauddetector:ListTagsForResource, gamelift:DescribeAlias, gamelift:DescribeBuild, gamelift:DescribeFleetAttributes, gamelift:DescribeFleetCapacity, gamelift:DescribeFleetLocationAttributes, gamelift:DescribeFleetLocationCapacity, gamelift:DescribeFleetPortSettings, gamelift:DescribeGameServerGroup, gamelift:DescribeGameSessionQueues, gamelift:DescribeMatchmakingConfigurations, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeRuntimeConfiguration, gamelift:DescribeScript, gamelift:DescribeVpcPeeringAuthorizations, gamelift:ListAliases, gamelift:ListBuilds, gamelift:ListFleets, gamelift:ListGameServerGroups, gamelift:ListScripts, gamelift:ListTagsForResource, geo:ListMaps, glue:GetClassifier, glue:GetClassifiers, imagebuilder:GetContainerRecipe, imagebuilder:GetImage, imagebuilder:GetImagePipeline, imagebuilder:GetImageRecipe, imagebuilder:ListContainerRecipes, imagebuilder:ListImageBuildVersions, imagebuilder:ListImagePipelines, imagebuilder:ListImageRecipes, imagebuilder:ListImages, iot:DescribeCertificate, iot:DescribeDimension, iot:DescribeRoleAlias, iot:DescribeSecurityProfile, iot:GetPolicy, iot:GetTopicRule, iot:GetTopicRuleDestination, iot:ListCertificates, iot:ListDimensions, iot:ListPolicies, iot:ListRoleAliases, iot:ListSecurityProfiles, iot:ListSecurityProfilesForTarget, iot:ListTagsForResource, iot:ListTargetsForSecurityProfile, iot:ListTopicRuleDestinations, iot:ListTopicRules, iot:ListV2LoggingLevels, iot:ValidateSecurityProfileBehaviors, iotanalytics:DescribeChannel, iotanalytics:DescribeDataset, iotanalytics:DescribeDatastore, iotanalytics:DescribePipeline, iotanalytics:ListChannels, iotanalytics:ListDatasets, iotanalytics:ListDatastores, iotanalytics:ListPipelines, iotanalytics:ListTagsForResource, iotevents:DescribeAlarmModel, iotevents:DescribeDetectorModel, iotevents:DescribeInput, iotevents:ListAlarmModels, iotevents:ListDetectorModels, iotevents:ListInputs, iotevents:ListTagsForResource, iotsitewise:DescribeAccessPolicy, iotsitewise:DescribeAsset, iotsitewise:ListAccessPolicies, iotsitewise:ListAssets, iottwinmaker:GetEntity, iottwinmaker:GetScene, iottwinmaker:GetWorkspace, iottwinmaker:ListEntities, iottwinmaker:ListScenes, iottwinmaker:ListTagsForResource, iottwinmaker:ListWorkspaces, ivs:GetPlaybackKeyPair, ivs:GetRecordingConfiguration, ivs:GetStreamKey, ivs:ListChannels, ivs:ListPlaybackKeyPairs, ivs:ListRecordingConfigurations, ivs:ListStreamKeys, ivs:ListTagsForResource, kinesisanalytics:ListApplications, lakeformation:DescribeResource, lakeformation:GetDataLakeSettings, lakeformation:ListPermissions, lakeformation:ListResources, lex:DescribeBot, lex:DescribeBotAlias, lex:DescribeResourcePolicy, lex:ListBotAliases, lex:ListBotLocales, lex:ListBots, lex:ListTagsForResource, license-manager:GetGrant, license-manager:GetLicense, license-manager:ListDistributedGrants, license-manager:ListLicenses, license-manager:ListReceivedGrants, lightsail:GetAlarms, lightsail:GetBuckets, lightsail:GetCertificates, lightsail:GetDisk, lightsail:GetDisks, lightsail:GetInstance, lightsail:GetInstances, lightsail:GetKeyPair, lightsail:GetLoadBalancer, lightsail:GetLoadBalancers, lightsail:GetLoadBalancerTlsCertificates, lightsail:GetStaticIp, lightsail:GetStaticIps, lookoutequipment:DescribeInferenceScheduler, lookoutequipment:ListTagsForResource, lookoutmetrics:DescribeAlert, lookoutmetrics:DescribeAnomalyDetector, lookoutmetrics:ListAlerts, lookoutmetrics:ListAnomalyDetectors, lookoutmetrics:ListMetricSets, lookoutmetrics:ListTagsForResource, lookoutvision:DescribeProject, lookoutvision:ListProjects, managedblockchain:GetMember, managedblockchain:GetNetwork, managedblockchain:GetNode, managedblockchain:ListInvitations, managedblockchain:ListMembers, managedblockchain:ListNodes, mediapackage-vod:DescribePackagingGroup, mediapackage-vod:ListPackagingGroups, mediapackage-vod:ListTagsForResource, mobiletargeting:GetInAppTemplate, mobiletargeting:ListTemplates, mq:DescribeBroker, mq:ListBrokers, nimble:GetLaunchProfile, nimble:GetLaunchProfileDetails, nimble:GetStreamingImage, nimble:GetStudio, nimble:GetStudioComponent, nimble:ListLaunchProfiles, nimble:ListStreamingImages, nimble:ListStudioComponents, nimble:ListStudios, profile:GetDomain, profile:GetIntegration, profile:GetProfileObjectType, profile:ListDomains, profile:ListIntegrations, profile:ListProfileObjectTypes, profile:ListTagsForResource, quicksight:DescribeAnalysis, quicksight:DescribeAnalysisPermissions, quicksight:DescribeDataSet, quicksight:DescribeDataSetPermissions, quicksight:DescribeTheme, quicksight:DescribeThemePermissions, quicksight:ListAnalyses, quicksight:ListDataSets, quicksight:ListThemes, resiliencehub:DescribeApp, resiliencehub:DescribeAppVersionTemplate, resiliencehub:DescribeResiliencyPolicy, resiliencehub:ListApps, resiliencehub:ListAppVersionResourceMappings, resiliencehub:ListResiliencyPolicies, route53-recovery-readiness:GetCell, route53-recovery-readiness:GetReadinessCheck, route53-recovery-readiness:GetRecoveryGroup, route53-recovery-readiness:GetResourceSet, route53-recovery-readiness:ListCells, route53-recovery-readiness:ListReadinessChecks, route53-recovery-readiness:ListRecoveryGroups, route53-recovery-readiness:ListResourceSets, route53resolver:GetFirewallDomainList, route53resolver:GetFirewallRuleGroup, route53resolver:GetFirewallRuleGroupAssociation, route53resolver:GetResolverQueryLogConfig, route53resolver:ListFirewallDomainLists, route53resolver:ListFirewallDomains, route53resolver:ListFirewallRuleGroupAssociations, route53resolver:ListFirewallRuleGroups, route53resolver:ListFirewallRules, route53resolver:ListResolverQueryLogConfigs, rum:GetAppMonitor, rum:GetAppMonitorData, rum:ListAppMonitors, rum:ListTagsForResource, s3-outposts:GetAccessPoint, s3-outposts:GetAccessPointPolicy, s3-outposts:GetBucket, s3-outposts:GetBucketPolicy, s3-outposts:GetBucketTagging, s3-outposts:GetLifecycleConfiguration, s3-outposts:ListAccessPoints, s3-outposts:ListEndpoints, s3-outposts:ListRegionalBuckets, schemas:DescribeDiscoverer, schemas:DescribeRegistry, schemas:DescribeSchema, schemas:ListDiscoverers, schemas:ListRegistries, schemas:ListSchemas, sdb:GetAttributes, sdb:ListDomains, ses:ListEmailTemplates, ses:ListReceiptFilters, ses:ListReceiptRuleSets, ses:ListTemplates, signer:GetSigningProfile, signer:ListProfilePermissions, signer:ListSigningProfiles, synthetics:DescribeCanaries, synthetics:DescribeCanariesLastRun, synthetics:DescribeRuntimeVersions, synthetics:GetCanary, synthetics:GetCanaryRuns, synthetics:ListTagsForResource, timestream:DescribeDatabase, timestream:DescribeTable, timestream:ListDatabases, timestream:ListTables, timestream:ListTagsForResource, transfer:DescribeServer, transfer:DescribeUser, transfer:DescribeWorkflow, transfer:ListServers, transfer:ListUsers, transfer:ListWorkflows, voiceid:DescribeDomain, and voiceid:ListTagsForResource |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon AppFlow, Amazon, Amazon CloudWatch RUM CloudWatch, Amazon CloudWatch Synthetics, Amazon Connect Customer Customer Voice ID, Amazon Connect Customer Voice ID, Amazon DevOps Guru, Amazon Elastic Compute Cloud (Amazon EC2), Amazon EC2 Auto Scaling, Amazon EMR, Amazon EventBridge, Amazon EventBridge Schemas Amazon FinSpace, Amazon Fraud Detector, Amazon GameLift Servers, Amazon Interactive Video Service (Amazon IVS), Amazon Managed Service per Apache Flink, EC2 Image Costruttore, Amazon Lex, Amazon Lightsail, Servizio di localizzazione Amazon, Amazon Lookout per apparecchiature, Amazon Lookout per metriche, Amazon Lookout per Vision, Amazon Managed Blockchain, Amazon MQ, Amazon Nimble StudioAmazon Pinpoint, Amazon Quick, Amazon Application Recovery Controller (ARC) Amazon Route 53 Resolver, Amazon Simple Storage Service (Amazon S3), Amazon SimpleDB, Amazon Simple Email Service (Amazon SES) AWS AppConfig AWS AppSync, Amazon Timestream AWS Auto Scaling AWS Backup AWS Budgets, AWS Cost Explorer, AWS Cloud9,, Servizio di directory AWS, AWS DataSync, AWS Elemental MediaPackage, AWS Glue, AWS IoT,, AWS IoT Analytics, AWS IoT Events, AWS IoT SiteWise, AWS IoT TwinMaker, AWS Lake Formation, AWS License Manager AWS Resilience Hub, AWS Signer, e AWS Transfer Family. |
7 settembre 2022 |
|
AWS_ConfigRole: aggiunta di appconfig:ListApplications, appflow:DescribeConnectorProfiles, appsync:GetApiCache, autoscaling-plans:DescribeScalingPlanResources, autoscaling-plans:DescribeScalingPlans, autoscaling-plans:GetScalingPlanResourceForecastData, autoscaling:DescribeWarmPool, backup:DescribeFramework, backup:DescribeReportPlan, backup:ListFrameworks, backup:ListReportPlans, budgets:DescribeBudgetAction, budgets:DescribeBudgetActionsForAccount, budgets:DescribeBudgetActionsForBudget, budgets:ViewBudget, ce:GetAnomalyMonitors, ce:GetAnomalySubscriptions, cloud9:DescribeEnvironmentMemberships, cloud9:DescribeEnvironments, cloud9:ListEnvironments, cloud9:ListTagsForResource, cloudwatch:GetMetricStream, cloudwatch:ListMetricStreams, datasync:DescribeLocationFsxWindows, devops-guru:GetResourceCollection, ds:DescribeDirectories, ec2:DescribeTrafficMirrorTargets, ec2:GetNetworkInsightsAccessScopeAnalysisFindings, ec2:GetNetworkInsightsAccessScopeContent, elasticmapreduce:DescribeStudio, elasticmapreduce:GetStudioSessionMapping, elasticmapreduce:ListStudios, elasticmapreduce:ListStudioSessionMappings, events:DescribeEndpoint, events:DescribeEventBus, events:DescribeRule, events:ListArchives, events:ListEndpoints, events:ListEventBuses, events:ListRules, events:ListTagsForResource, events:ListTargetsByRule, finspace:GetEnvironment, finspace:ListEnvironments, frauddetector:GetDetectors, frauddetector:GetDetectorVersion, frauddetector:GetEntityTypes, frauddetector:GetEventTypes, frauddetector:GetExternalModels, frauddetector:GetLabels, frauddetector:GetModels, frauddetector:GetOutcomes, frauddetector:GetVariables, frauddetector:ListTagsForResource, gamelift:DescribeAlias, gamelift:DescribeBuild, gamelift:DescribeFleetAttributes, gamelift:DescribeFleetCapacity, gamelift:DescribeFleetLocationAttributes, gamelift:DescribeFleetLocationCapacity, gamelift:DescribeFleetPortSettings, gamelift:DescribeGameServerGroup, gamelift:DescribeGameSessionQueues, gamelift:DescribeMatchmakingConfigurations, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeRuntimeConfiguration, gamelift:DescribeScript, gamelift:DescribeVpcPeeringAuthorizations, gamelift:ListAliases, gamelift:ListBuilds, gamelift:ListFleets, gamelift:ListGameServerGroups, gamelift:ListScripts, gamelift:ListTagsForResource, geo:ListMaps, glue:GetClassifier, glue:GetClassifiers, imagebuilder:GetContainerRecipe, imagebuilder:GetImage, imagebuilder:GetImagePipeline, imagebuilder:GetImageRecipe, imagebuilder:ListContainerRecipes, imagebuilder:ListImageBuildVersions, imagebuilder:ListImagePipelines, imagebuilder:ListImageRecipes, imagebuilder:ListImages, iot:DescribeCertificate, iot:DescribeDimension, iot:DescribeRoleAlias, iot:DescribeSecurityProfile, iot:GetPolicy, iot:GetTopicRule, iot:GetTopicRuleDestination, iot:ListCertificates, iot:ListDimensions, iot:ListPolicies, iot:ListRoleAliases, iot:ListSecurityProfiles, iot:ListSecurityProfilesForTarget, iot:ListTagsForResource, iot:ListTargetsForSecurityProfile, iot:ListTopicRuleDestinations, iot:ListTopicRules, iot:ListV2LoggingLevels, iot:ValidateSecurityProfileBehaviors, iotanalytics:DescribeChannel, iotanalytics:DescribeDataset, iotanalytics:DescribeDatastore, iotanalytics:DescribePipeline, iotanalytics:ListChannels, iotanalytics:ListDatasets, iotanalytics:ListDatastores, iotanalytics:ListPipelines, iotanalytics:ListTagsForResource, iotevents:DescribeAlarmModel, iotevents:DescribeDetectorModel, iotevents:DescribeInput, iotevents:ListAlarmModels, iotevents:ListDetectorModels, iotevents:ListInputs, iotevents:ListTagsForResource, iotsitewise:DescribeAccessPolicy, iotsitewise:DescribeAsset, iotsitewise:ListAccessPolicies, iotsitewise:ListAssets, iottwinmaker:GetEntity, iottwinmaker:GetScene, iottwinmaker:GetWorkspace, iottwinmaker:ListEntities, iottwinmaker:ListScenes, iottwinmaker:ListTagsForResource, iottwinmaker:ListWorkspaces, ivs:GetPlaybackKeyPair, ivs:GetRecordingConfiguration, ivs:GetStreamKey, ivs:ListChannels, ivs:ListPlaybackKeyPairs, ivs:ListRecordingConfigurations, ivs:ListStreamKeys, ivs:ListTagsForResource, kinesisanalytics:ListApplications, lakeformation:DescribeResource, lakeformation:GetDataLakeSettings, lakeformation:ListPermissions, lakeformation:ListResources, lex:DescribeBot, lex:DescribeBotAlias, lex:DescribeResourcePolicy, lex:ListBotAliases, lex:ListBotLocales, lex:ListBots, lex:ListTagsForResource, license-manager:GetGrant, license-manager:GetLicense, license-manager:ListDistributedGrants, license-manager:ListLicenses, license-manager:ListReceivedGrants, lightsail:GetAlarms, lightsail:GetBuckets, lightsail:GetCertificates, lightsail:GetDisk, lightsail:GetDisks, lightsail:GetInstance, lightsail:GetInstances, lightsail:GetKeyPair, lightsail:GetLoadBalancer, lightsail:GetLoadBalancers, lightsail:GetLoadBalancerTlsCertificates, lightsail:GetStaticIp, lightsail:GetStaticIps, lookoutequipment:DescribeInferenceScheduler, lookoutequipment:ListTagsForResource, lookoutmetrics:DescribeAlert, lookoutmetrics:DescribeAnomalyDetector, lookoutmetrics:ListAlerts, lookoutmetrics:ListAnomalyDetectors, lookoutmetrics:ListMetricSets, lookoutmetrics:ListTagsForResource, lookoutvision:DescribeProject, lookoutvision:ListProjects, managedblockchain:GetMember, managedblockchain:GetNetwork, managedblockchain:GetNode, managedblockchain:ListInvitations, managedblockchain:ListMembers, managedblockchain:ListNodes, mediapackage-vod:DescribePackagingGroup, mediapackage-vod:ListPackagingGroups, mediapackage-vod:ListTagsForResource, mobiletargeting:GetInAppTemplate, mobiletargeting:ListTemplates, mq:DescribeBroker, mq:ListBrokers, nimble:GetLaunchProfile, nimble:GetLaunchProfileDetails, nimble:GetStreamingImage, nimble:GetStudio, nimble:GetStudioComponent, nimble:ListLaunchProfiles, nimble:ListStreamingImages, nimble:ListStudioComponents, nimble:ListStudios, profile:GetDomain, profile:GetIntegration, profile:GetProfileObjectType, profile:ListDomains, profile:ListIntegrations, profile:ListProfileObjectTypes, profile:ListTagsForResource, quicksight:DescribeAnalysis, quicksight:DescribeAnalysisPermissions, quicksight:DescribeDataSet, quicksight:DescribeDataSetPermissions, quicksight:DescribeTheme, quicksight:DescribeThemePermissions, quicksight:ListAnalyses, quicksight:ListDataSets, quicksight:ListThemes, resiliencehub:DescribeApp, resiliencehub:DescribeAppVersionTemplate, resiliencehub:DescribeResiliencyPolicy, resiliencehub:ListApps, resiliencehub:ListAppVersionResourceMappings, resiliencehub:ListResiliencyPolicies, route53-recovery-readiness:GetCell, route53-recovery-readiness:GetReadinessCheck, route53-recovery-readiness:GetRecoveryGroup, route53-recovery-readiness:GetResourceSet, route53-recovery-readiness:ListCells, route53-recovery-readiness:ListReadinessChecks, route53-recovery-readiness:ListRecoveryGroups, route53-recovery-readiness:ListResourceSets, route53resolver:GetFirewallDomainList, route53resolver:GetFirewallRuleGroup, route53resolver:GetFirewallRuleGroupAssociation, route53resolver:GetResolverQueryLogConfig, route53resolver:ListFirewallDomainLists, route53resolver:ListFirewallDomains, route53resolver:ListFirewallRuleGroupAssociations, route53resolver:ListFirewallRuleGroups, route53resolver:ListFirewallRules, route53resolver:ListResolverQueryLogConfigs, rum:GetAppMonitor, rum:GetAppMonitorData, rum:ListAppMonitors, rum:ListTagsForResource, s3-outposts:GetAccessPoint, s3-outposts:GetAccessPointPolicy, s3-outposts:GetBucket, s3-outposts:GetBucketPolicy, s3-outposts:GetBucketTagging, s3-outposts:GetLifecycleConfiguration, s3-outposts:ListAccessPoints, s3-outposts:ListEndpoints, s3-outposts:ListRegionalBuckets, schemas:DescribeDiscoverer, schemas:DescribeRegistry, schemas:DescribeSchema, schemas:ListDiscoverers, schemas:ListRegistries, schemas:ListSchemas, sdb:GetAttributes, sdb:ListDomains, ses:ListEmailTemplates, ses:ListReceiptFilters, ses:ListReceiptRuleSets, ses:ListTemplates, signer:GetSigningProfile, signer:ListProfilePermissions, signer:ListSigningProfiles, synthetics:DescribeCanaries, synthetics:DescribeCanariesLastRun, synthetics:DescribeRuntimeVersions, synthetics:GetCanary, synthetics:GetCanaryRuns, synthetics:ListTagsForResource, timestream:DescribeDatabase, timestream:DescribeTable, timestream:ListDatabases, timestream:ListTables, timestream:ListTagsForResource, transfer:DescribeServer, transfer:DescribeUser, transfer:DescribeWorkflow, transfer:ListServers, transfer:ListUsers, transfer:ListWorkflows, voiceid:DescribeDomain, and voiceid:ListTagsForResource |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon AppFlow, Amazon, Amazon CloudWatch RUM CloudWatch, Amazon CloudWatch Synthetics, Amazon Connect Customer Customer Voice ID, Amazon Connect Customer Voice ID, Amazon DevOps Guru, Amazon Elastic Compute Cloud (Amazon EC2), Amazon EC2 Auto Scaling, Amazon EMR, Amazon, Amazon EventBridge Schemas EventBridge, Amazon Fraud Detector Amazon FinSpace, Amazon GameLift Servers, Amazon Interactive Video Service (Amazon IVS), Amazon Managed Service per Apache Flink, EC2 Image Costruttore, Amazon Lex, Amazon Lightsail, Servizio di localizzazione Amazon, Amazon Lookout per apparecchiature, Amazon Lookout per metriche, Amazon Lookout per Vision, Amazon Managed Blockchain, Amazon MQ, Amazon Nimble StudioAmazon Pinpoint, Amazon Quick, Amazon Application Recovery Controller (ARC) Amazon Route 53 Resolver, Amazon Simple Storage Service (Amazon S3), Amazon SimpleDB, Amazon Simple Email Service (Amazon SES) AWS AppConfig AWS AppSync, Amazon Timestream AWS Auto Scaling AWS Backup AWS Budgets, AWS Cost Explorer, AWS Cloud9,, Servizio di directory AWS, AWS DataSync, AWS Elemental MediaPackage, AWS Glue, AWS IoT,, AWS IoT Analytics, AWS IoT Events, AWS IoT SiteWise, AWS IoT TwinMaker, AWS Lake Formation AWS License Manager, AWS Resilience Hub, AWS Signer, e AWS Transfer Family |
7 settembre 2022 |
| AWSConfigServiceRolePolicy: aggiunta di airflow:ListTagsForResource, iot:ListCustomMetrics, iot:DescribeCustomMetric, appstream:DescribeDirectoryConfigs, appstream:ListTagsForResource, codeguru-reviewer:DescribeRepositoryAssociation, codeguru-reviewer:ListRepositoryAssociations, healthlake:ListFHIRDatastores, healthlake:DescribeFHIRDatastore, healthlake:ListTagsForResource, kinesisvideo:DescribeStream, kinesisvideo:ListStreams, kinesisvideo:ListTagsForStream, kinesisvideo:DescribeSignalingChannel, kinesisvideo:ListTagsForResource, kinesisvideo:ListSignalingChannels, route53-recovery-control-config:DescribeCluster, route53-recovery-control-config:DescribeRoutingControl, route53-recovery-control-config:DescribeSafetyRule, route53-recovery-control-config:ListClusters, route53-recovery-control-config:ListRoutingControls, route53-recovery-control-config:ListSafetyRules, devicefarm:GetTestGridProject, devicefarm:ListTestGridProjects, ec2:DescribeCapacityReservationFleets, ec2:DescribeIpamPools, ec2:DescribeIpams, ec2:GetInstanceTypesFromInstanceRequirement, mobiletargeting:GetApplicationSettings, mobiletargeting:ListTagsForResource, ecr:BatchGetRepositoryScanningConfiguration, iam:ListServerCertificates, guardduty:ListPublishingDestinations, guardduty:DescribePublishingDestination, logs:GetLogDelivery, and logs:ListLogDeliveries | Questa politica ora supporta autorizzazioni aggiuntive per Amazon Managed Workflows per Apache Airflow, Amazon WorkSpaces Applications AWS IoT, Amazon CodeGuru Reviewer, Amazon Kinesis Video Streams AWS HealthLake, Amazon Application Recovery Controller (ARC), Amazon Elastic Compute Cloud (Amazon EC2) AWS Device Farm, Amazon Pinpoint, (IAM), Amazon e Amazon Logs. AWS Identity and Access Management GuardDuty CloudWatch | 1 febbraio 2023 |
|
AWS_ConfigRole: aggiunta di airflow:ListTagsForResource, iot:ListCustomMetrics, iot:DescribeCustomMetric, appstream:DescribeDirectoryConfigs, appstream:ListTagsForResource, codeguru-reviewer:DescribeRepositoryAssociation, codeguru-reviewer:ListRepositoryAssociations, healthlake:ListFHIRDatastores, healthlake:DescribeFHIRDatastore, healthlake:ListTagsForResource, kinesisvideo:DescribeStream, kinesisvideo:ListStreams, kinesisvideo:ListTagsForStream, kinesisvideo:DescribeSignalingChannel, kinesisvideo:ListTagsForResource, kinesisvideo:ListSignalingChannels, route53-recovery-control-config:DescribeCluster, route53-recovery-control-config:DescribeRoutingControl, route53-recovery-control-config:DescribeSafetyRule, route53-recovery-control-config:ListClusters, route53-recovery-control-config:ListRoutingControls, route53-recovery-control-config:ListSafetyRules, devicefarm:GetTestGridProject, devicefarm:ListTestGridProjects, ec2:DescribeCapacityReservationFleets, ec2:DescribeIpamPools, ec2:DescribeIpams, ec2:GetInstanceTypesFromInstanceRequirement, mobiletargeting:GetApplicationSettings, mobiletargeting:ListTagsForResource, ecr:BatchGetRepositoryScanningConfiguration, iam:ListServerCertificates, guardduty:ListPublishingDestinations, guardduty:DescribePublishingDestination, logs:GetLogDelivery, and logs:ListLogDeliveries |
Questa policy ora supporta autorizzazioni aggiuntive per Amazon Managed Workflows for Apache Airflow AWS IoT, Amazon WorkSpaces Applications, Amazon CodeGuru Reviewer AWS HealthLake, Amazon Kinesis Video Streams, Amazon Application Recovery Controller (ARC) AWS Device Farm, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Pinpoint, AWS Identity and Access Management (IAM) GuardDuty, Amazon e Amazon CloudWatch Logs. |
1 febbraio 2023 |
|
ConfigConformsServiceRolePolicy: aggiornamento di config:DescribeConfigRules |
Come best practice di sicurezza, questa policy ora rimuove l'autorizzazione ampia a livello di risorsa per |
12 gennaio 2023 |
|
AWSConfigServiceRolePolicy: aggiunta di APS:DescribeRuleGroupsNamespace, APS:DescribeWorkspace, APS:ListWorkspaces, auditmanager:GetAssessment, auditmanager:ListAssessments, devicefarm:GetNetworkProfile, AWS Transfer Family devicefarm:GetProject, devicefarm:ListNetworkProfiles, devicefarm:ListTagsForResource, dms:DescribeEndpoints, ds:ListTagsForResource, ec2:DescribeTags, ec2:DescribeTrafficMirrorSessions, ec2:DescribeTrafficMirrorTargets, ec2:GetIpamPoolAllocations, ec2:GetIpamPoolCidrs, glue:GetMLTransform, glue:GetMLTransforms, glue:ListMLTransforms, iot:DescribeScheduledAudit, iot:ListScheduledAudits, ivs:GetChannel, lightsail:GetRelationalDatabases, mediapackage-vod:DescribePackagingConfiguration, mediapackage-vod:ListPackagingConfigurations, networkmanager:DescribeGlobalNetworks, networkmanager:GetTransitGatewayRegistrations, networkmanager:ListTagsForResource, quicksight:DescribeDashboard, quicksight:DescribeDashboardPermissions, quicksight:DescribeTemplate, quicksight:DescribeTemplatePermissions, quicksight:ListDashboards, quicksight:ListTemplates, ram:ListResources, route53-recovery-control-config:DescribeControlPanel, route53-recovery-control-config:ListControlPanels, route53-recovery-control-config:ListTagsForResource, route53resolver:GetResolverQueryLogConfigAssociation, route53resolver:ListResolverQueryLogConfigAssociations, s3:GetAccessPointForObjectLambda, s3:GetAccessPointPolicyForObjectLambda, s3:GetAccessPointPolicyStatusForObjectLambda, s3:GetMultiRegionAccessPoint, s3:ListAccessPointsForObjectLambda, s3:ListMultiRegionAccessPoints, timestream:DescribeEndpoints, transfer:DescribeConnector, transfer:ListConnectors, and transfer:ListTagsForResource |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Managed Service for Prometheus,, AWS Audit Manager, AWS Device Farm, Servizio di directory AWS, AWS Database Migration Service Amazon Elastic Compute Cloud (Amazon EC2),, AWS Glue, Amazon Lightsail AWS IoT,,, Amazon Quick AWS Elemental MediaPackage AWS Network Manager AWS Resource Access Manager, Amazon Application Recovery Controller (ARC), Amazon Simple Storage Service (Amazon S3) e Amazon Timestream.AWS DMS |
15 dicembre 2022 |
|
AWS_ConfigRole: aggiunta di APS:DescribeRuleGroupsNamespace, APS:DescribeWorkspace, APS:ListWorkspaces, auditmanager:GetAssessment, auditmanager:ListAssessments, devicefarm:GetNetworkProfile, devicefarm:GetProject, devicefarm:ListNetworkProfiles, devicefarm:ListTagsForResource, dms:DescribeEndpoints, ds:ListTagsForResource, ec2:DescribeTags, ec2:DescribeTrafficMirrorSessions, ec2:DescribeTrafficMirrorTargets, ec2:GetIpamPoolAllocations, ec2:GetIpamPoolCidrs, glue:GetMLTransform, glue:GetMLTransforms, glue:ListMLTransforms, iot:DescribeScheduledAudit, iot:ListScheduledAudits, ivs:GetChannel, lightsail:GetRelationalDatabases, mediapackage-vod:DescribePackagingConfiguration, mediapackage-vod:ListPackagingConfigurations, networkmanager:DescribeGlobalNetworks, networkmanager:GetTransitGatewayRegistrations, networkmanager:ListTagsForResource, quicksight:DescribeDashboard, quicksight:DescribeDashboardPermissions, quicksight:DescribeTemplate, quicksight:DescribeTemplatePermissions, quicksight:ListDashboards, quicksight:ListTemplates, ram:ListResources, route53-recovery-control-config:DescribeControlPanel, route53-recovery-control-config:ListControlPanels, route53-recovery-control-config:ListTagsForResource, route53resolver:GetResolverQueryLogConfigAssociation, route53resolver:ListResolverQueryLogConfigAssociations, s3:GetAccessPointForObjectLambda, s3:GetAccessPointPolicyForObjectLambda, s3:GetAccessPointPolicyStatusForObjectLambda, s3:GetMultiRegionAccessPoint, s3:ListAccessPointsForObjectLambda, s3:ListMultiRegionAccessPoints, timestream:DescribeEndpoints, transfer:DescribeConnector, transfer:ListConnectors, and transfer:ListTagsForResource |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Managed Service for Prometheus,, AWS Audit Manager, AWS Device Farm, Servizio di directory AWS, AWS Database Migration Service Amazon Elastic Compute Cloud (Amazon EC2),, AWS Glue, Amazon Lightsail AWS IoT,,, Amazon Quick AWS Elemental MediaPackage AWS Network Manager AWS Resource Access Manager, Amazon Application Recovery Controller (ARC), Amazon Simple Storage Service (Amazon S3) e Amazon Timestream.AWS DMS |
15 dicembre 2022 |
|
AWSConfigServiceRolePolicy: aggiunta di cloudformation:ListStackResources and cloudformation:ListStacks |
Questa politica ora concede l'autorizzazione a restituire le descrizioni di tutte le risorse di uno AWS CloudFormation stack specificato e restituire le informazioni di riepilogo per gli stack il cui stato corrisponde a quello specificatoStackStatusFilter. |
7 novembre 2022 |
|
AWS_ConfigRole: aggiunta di cloudformation:ListStackResources and cloudformation:ListStacks |
Questa politica ora concede l'autorizzazione a restituire le descrizioni di tutte le risorse di uno AWS CloudFormation stack specificato e a restituire le informazioni di riepilogo per gli stack il cui stato corrisponde a quello specificato. StackStatusFilter |
7 novembre 2022 |
|
AWSConfigServiceRolePolicy: aggiunta di acm-pca:GetCertificateAuthorityCsr, acm-pca:ListCertificateAuthorities, acm-pca:ListTags, airflow:GetEnvironment, airflow:ListEnvironments, amplifyuibuilder:ListThemes, appconfig:ListConfigurationProfiles, appconfig:ListDeployments, appconfig:ListDeploymentStrategies, appconfig:ListEnvironments, appconfig:ListHostedConfigurationVersions, cassandra:Select, cloudwatch:DescribeAnomalyDetectors, cloudwatch:GetDashboard, cloudwatch:ListDashboards, connect:DescribePhoneNumber, connect:ListPhoneNumbers, connect:ListPhoneNumbersV2, connect:SearchAvailablePhoneNumbers, databrew:DescribeDataset, databrew:DescribeJob, databrew:DescribeProject, databrew:DescribeRecipe, databrew:DescribeRuleset, databrew:DescribeSchedule, databrew:ListDatasets, databrew:ListJobs, databrew:ListProjects, databrew:ListRecipes, databrew:ListRecipeVersions, databrew:ListRulesets, databrew:ListSchedules, ec2:DescribeRouteTables, eks:DescribeAddon, eks:DescribeIdentityProviderConfig, eks:ListAddons, eks:ListIdentityProviderConfigs, events:DescribeConnection, events:ListApiDestinations, events:ListConnections, fis:GetExperimentTemplate, fis:ListExperimentTemplates, frauddetector:GetRules, fsx:DescribeBackups, fsx:DescribeSnapshots, fsx:DescribeStorageVirtualMachines, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeVpcPeeringConnections, geo:ListGeofenceCollections, geo:ListPlaceIndexes, geo:ListRouteCalculators, geo:ListTrackers, iot:DescribeAccountAuditConfiguration, iot:DescribeAuthorizer, iot:DescribeDomainConfiguration, iot:DescribeMitigationAction, iot:ListAuthorizers, iot:ListDomainConfigurations, iot:ListMitigationActions, iotsitewise:DescribeAssetModel, iotsitewise:DescribeDashboard, iotsitewise:DescribeGateway, iotsitewise:DescribePortal, iotsitewise:DescribeProject, iotsitewise:ListAssetModels, iotsitewise:ListDashboards, iotsitewise:ListGateways, iotsitewise:ListPortals, iotsitewise:ListProjectAssets, iotsitewise:ListProjects, iotsitewise:ListTagsForResource, iotwireless:GetServiceProfile, iotwireless:GetWirelessDevice, iotwireless:GetWirelessGatewayTaskDefinition, iotwireless:ListServiceProfiles, iotwireless:ListTagsForResource, iotwireless:ListWirelessDevices, iotwireless:ListWirelessGatewayTaskDefinitions, lex:DescribeBotVersion, lex:ListBotVersions, lightsail:GetContainerServices, lightsail:GetDistributions, lightsail:GetRelationalDatabase, lightsail:GetRelationalDatabaseParameters, mobiletargeting:GetApps, mobiletargeting:GetCampaign, mobiletargeting:GetSegment, mobiletargeting:GetSegments, opsworks:DescribeInstances, opsworks:DescribeTimeBasedAutoScaling, opsworks:DescribeVolumes, panorama:DescribeApplicationInstance, panorama:DescribeApplicationInstanceDetails, panorama:DescribePackage, panorama:DescribePackageVersion, panorama:ListApplicationInstances, panorama:ListPackages, quicksight:ListDataSources, ram:ListResourceSharePermissions, rds:DescribeDBProxies, rds:DescribeGlobalClusters, rekognition:ListStreamProcessors, resource-groups:GetGroup, resource-groups:GetGroupConfiguration, resource-groups:GetGroupQuery, resource-groups:GetTags, resource-groups:ListGroupResources, resource-groups:ListGroups, robomaker:ListRobotApplications, robomaker:ListSimulationApplications, route53resolver:GetResolverDnssecConfig, route53resolver:ListResolverDnssecConfigs, s3:ListStorageLensConfigurations, schemas:GetResourcePolicy, servicediscovery:ListInstances, sts:GetCallerIdentity, synthetics:GetGroup, synthetics:ListAssociatedGroups, synthetics:ListGroupResources, and synthetics:ListGroups |
Questa politica ora supporta autorizzazioni aggiuntive per AWS Certificate Manager Amazon Managed Workflow per Apache Airflow, AWS Amplify AWS AppConfig, Amazon Keyspaces, Amazon CloudWatch, Connect Customer, AWS Glue DataBrew, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Elastic Kubernetes Service (Amazon EKS), Amazon EventBridge, Amazon AWS Fault Injection Service, Amazon Fraud Detector, Amazon FSx, Amazon GameLift Servers AWS IoT, Amazon Location Service, Amazon Lex, Amazon Lightsail OpsWorks, Amazon Pinpoint AWS Panorama AWS Resource Access Manager, Amazon Quick, Amazon Relational Servizio di database (Amazon RDS), Amazon Rekognition,, AWS RoboMaker AWS Resource Groups, Amazon Route 53, Amazon Simple Storage Service (Amazon S3) e Servizio di token di sicurezza AWS. AWS Cloud Map |
19 ottobre 2022 |
|
AWS_ConfigRole: aggiunta di acm-pca:GetCertificateAuthorityCsr, acm-pca:ListCertificateAuthorities, acm-pca:ListTags, airflow:GetEnvironment, airflow:ListEnvironments, amplifyuibuilder:ListThemes, appconfig:ListConfigurationProfiles, appconfig:ListDeployments, appconfig:ListDeploymentStrategies, appconfig:ListEnvironments, appconfig:ListHostedConfigurationVersions, cassandra:Select, cloudwatch:DescribeAnomalyDetectors, cloudwatch:GetDashboard, cloudwatch:ListDashboards, connect:DescribePhoneNumber, connect:ListPhoneNumbers, connect:ListPhoneNumbersV2, connect:SearchAvailablePhoneNumbers, databrew:DescribeDataset, databrew:DescribeJob, databrew:DescribeProject, databrew:DescribeRecipe, databrew:DescribeRuleset, databrew:DescribeSchedule, databrew:ListDatasets, databrew:ListJobs, databrew:ListProjects, databrew:ListRecipes, databrew:ListRecipeVersions, databrew:ListRulesets, databrew:ListSchedules, ec2:DescribeRouteTables, eks:DescribeAddon, eks:DescribeIdentityProviderConfig, eks:ListAddons, eks:ListIdentityProviderConfigs, events:DescribeConnection, events:ListApiDestinations, events:ListConnections, fis:GetExperimentTemplate, fis:ListExperimentTemplates, frauddetector:GetRules, fsx:DescribeBackups, fsx:DescribeSnapshots, fsx:DescribeStorageVirtualMachines, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeVpcPeeringConnections, geo:ListGeofenceCollections, geo:ListPlaceIndexes, geo:ListRouteCalculators, geo:ListTrackers, iot:DescribeAccountAuditConfiguration, iot:DescribeAuthorizer, iot:DescribeDomainConfiguration, iot:DescribeMitigationAction, iot:ListAuthorizers, iot:ListDomainConfigurations, iot:ListMitigationActions, iotsitewise:DescribeAssetModel, iotsitewise:DescribeDashboard, iotsitewise:DescribeGateway, iotsitewise:DescribePortal, iotsitewise:DescribeProject, iotsitewise:ListAssetModels, iotsitewise:ListDashboards, iotsitewise:ListGateways, iotsitewise:ListPortals, iotsitewise:ListProjectAssets, iotsitewise:ListProjects, iotsitewise:ListTagsForResource, iotwireless:GetServiceProfile, iotwireless:GetWirelessDevice, iotwireless:GetWirelessGatewayTaskDefinition, iotwireless:ListServiceProfiles, iotwireless:ListTagsForResource, iotwireless:ListWirelessDevices, iotwireless:ListWirelessGatewayTaskDefinitions, lex:DescribeBotVersion, lex:ListBotVersions, lightsail:GetContainerServices, lightsail:GetDistributions, lightsail:GetRelationalDatabase, lightsail:GetRelationalDatabaseParameters, mobiletargeting:GetApps, mobiletargeting:GetCampaign, mobiletargeting:GetSegment, mobiletargeting:GetSegments, opsworks:DescribeInstances, opsworks:DescribeTimeBasedAutoScaling, opsworks:DescribeVolumes, panorama:DescribeApplicationInstance, panorama:DescribeApplicationInstanceDetails, panorama:DescribePackage, panorama:DescribePackageVersion, panorama:ListApplicationInstances, panorama:ListPackages, quicksight:ListDataSources, ram:ListResourceSharePermissions, rds:DescribeDBProxies, rds:DescribeGlobalClusters, rekognition:ListStreamProcessors, resource-groups:GetGroup, resource-groups:GetGroupConfiguration, resource-groups:GetGroupQuery, resource-groups:GetTags, resource-groups:ListGroupResources, resource-groups:ListGroups, robomaker:ListRobotApplications, robomaker:ListSimulationApplications, route53resolver:GetResolverDnssecConfig, route53resolver:ListResolverDnssecConfigs, s3:ListStorageLensConfigurations, schemas:GetResourcePolicy, servicediscovery:ListInstances, sts:GetCallerIdentity, synthetics:GetGroup, synthetics:ListAssociatedGroups, synthetics:ListGroupResources, and synthetics:ListGroups |
Questa politica ora supporta autorizzazioni aggiuntive per AWS Certificate Manager Amazon Managed Workflow per Apache Airflow, AWS Amplify AWS AppConfig, Amazon Keyspaces, Amazon CloudWatch, Connect Customer, AWS Glue DataBrew, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Elastic Kubernetes Service (Amazon EKS), Amazon EventBridge, Amazon AWS Fault Injection Service, Amazon Fraud Detector, Amazon FSx, Amazon GameLift Servers AWS IoT, Amazon Location Service, Amazon Lex, Amazon Lightsail OpsWorks, Amazon Pinpoint AWS Panorama AWS Resource Access Manager, Amazon Quick, Amazon Relational Servizio di database (Amazon RDS), Amazon Rekognition,, AWS RoboMaker AWS Resource Groups, Amazon Route 53, Amazon Simple Storage Service (Amazon S3) e Servizio di token di sicurezza AWS. AWS Cloud Map |
19 ottobre 2022 |
|
AWSConfigServiceRolePolicy: aggiunta di Glue::GetTable |
Questa policy ora concede l'autorizzazione a recuperare la definizione della AWS Glue tabella in un catalogo dati per una tabella specificata. |
14 settembre 2022 |
|
AWS_ConfigRole: aggiunta di Glue::GetTable |
Questa politica ora concede l'autorizzazione a recuperare la definizione della AWS Glue tabella in un catalogo dati per una tabella specificata. |
14 settembre 2022 |
|
AWSConfigServiceRolePolicy: aggiunta di appconfig:ListApplications, appflow:DescribeConnectorProfiles, appsync:GetApiCache, autoscaling-plans:DescribeScalingPlanResources, autoscaling-plans:DescribeScalingPlans, autoscaling-plans:GetScalingPlanResourceForecastData, autoscaling:DescribeWarmPool, backup:DescribeFramework, backup:DescribeReportPlan, backup:ListFrameworks, backup:ListReportPlans, budgets:DescribeBudgetAction, budgets:DescribeBudgetActionsForAccount, budgets:DescribeBudgetActionsForBudget, budgets:ViewBudget, ce:GetAnomalyMonitors, ce:GetAnomalySubscriptions, cloud9:DescribeEnvironmentMemberships, cloud9:DescribeEnvironments, cloud9:ListEnvironments, cloud9:ListTagsForResource, cloudwatch:GetMetricStream, cloudwatch:ListMetricStreams, datasync:DescribeLocationFsxWindows, devops-guru:GetResourceCollection, ds:DescribeDirectories, ec2:DescribeTrafficMirrorFilters, ec2:DescribeTrafficMirrorTargets, ec2:GetNetworkInsightsAccessScopeAnalysisFindings, ec2:GetNetworkInsightsAccessScopeContent, elasticmapreduce:DescribeStudio, elasticmapreduce:GetStudioSessionMapping, elasticmapreduce:ListStudios, elasticmapreduce:ListStudioSessionMappings, events:DescribeEndpoint, events:DescribeEventBus, events:DescribeRule, events:ListArchives, events:ListEndpoints, events:ListEventBuses, events:ListRules, events:ListTagsForResource, events:ListTargetsByRule, finspace:GetEnvironment, finspace:ListEnvironments, frauddetector:GetDetectors, frauddetector:GetDetectorVersion, frauddetector:GetEntityTypes, frauddetector:GetEventTypes, frauddetector:GetExternalModels, frauddetector:GetLabels, frauddetector:GetModels, frauddetector:GetOutcomes, frauddetector:GetVariables, frauddetector:ListTagsForResource, gamelift:DescribeAlias, gamelift:DescribeBuild, gamelift:DescribeFleetAttributes, gamelift:DescribeFleetCapacity, gamelift:DescribeFleetLocationAttributes, gamelift:DescribeFleetLocationCapacity, gamelift:DescribeFleetPortSettings, gamelift:DescribeGameServerGroup, gamelift:DescribeGameSessionQueues, gamelift:DescribeMatchmakingConfigurations, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeRuntimeConfiguration, gamelift:DescribeScript, gamelift:DescribeVpcPeeringAuthorizations, gamelift:ListAliases, gamelift:ListBuilds, gamelift:ListFleets, gamelift:ListGameServerGroups, gamelift:ListScripts, gamelift:ListTagsForResource, geo:ListMaps, glue:GetClassifier, glue:GetClassifiers, imagebuilder:GetContainerRecipe, imagebuilder:GetImage, imagebuilder:GetImagePipeline, imagebuilder:GetImageRecipe, imagebuilder:ListContainerRecipes, imagebuilder:ListImageBuildVersions, imagebuilder:ListImagePipelines, imagebuilder:ListImageRecipes, imagebuilder:ListImages, iot:DescribeCertificate, iot:DescribeDimension, iot:DescribeRoleAlias, iot:DescribeSecurityProfile, iot:GetPolicy, iot:GetTopicRule, iot:GetTopicRuleDestination, iot:ListCertificates, iot:ListDimensions, iot:ListPolicies, iot:ListRoleAliases, iot:ListSecurityProfiles, iot:ListSecurityProfilesForTarget, iot:ListTagsForResource, iot:ListTargetsForSecurityProfile, iot:ListTopicRuleDestinations, iot:ListTopicRules, iot:ListV2LoggingLevels, iot:ValidateSecurityProfileBehaviors, iotanalytics:DescribeChannel, iotanalytics:DescribeDataset, iotanalytics:DescribeDatastore, iotanalytics:DescribePipeline, iotanalytics:ListChannels, iotanalytics:ListDatasets, iotanalytics:ListDatastores, iotanalytics:ListPipelines, iotanalytics:ListTagsForResource, iotevents:DescribeAlarmModel, iotevents:DescribeDetectorModel, iotevents:DescribeInput, iotevents:ListAlarmModels, iotevents:ListDetectorModels, iotevents:ListInputs, iotevents:ListTagsForResource, iotsitewise:DescribeAccessPolicy, iotsitewise:DescribeAsset, iotsitewise:ListAccessPolicies, iotsitewise:ListAssets, iottwinmaker:GetEntity, iottwinmaker:GetScene, iottwinmaker:GetWorkspace, iottwinmaker:ListEntities, iottwinmaker:ListScenes, iottwinmaker:ListTagsForResource, iottwinmaker:ListWorkspaces, ivs:GetPlaybackKeyPair, ivs:GetRecordingConfiguration, ivs:GetStreamKey, ivs:ListChannels, ivs:ListPlaybackKeyPairs, ivs:ListRecordingConfigurations, ivs:ListStreamKeys, ivs:ListTagsForResource, kinesisanalytics:ListApplications, lakeformation:DescribeResource, lakeformation:GetDataLakeSettings, lakeformation:ListPermissions, lakeformation:ListResources, lex:DescribeBot, lex:DescribeBotAlias, lex:DescribeResourcePolicy, lex:ListBotAliases, lex:ListBotLocales, lex:ListBots, lex:ListTagsForResource, license-manager:GetGrant, license-manager:GetLicense, license-manager:ListDistributedGrants, license-manager:ListLicenses, license-manager:ListReceivedGrants, lightsail:GetAlarms, lightsail:GetBuckets, lightsail:GetCertificates, lightsail:GetDisk, lightsail:GetDisks, lightsail:GetInstance, lightsail:GetInstances, lightsail:GetKeyPair, lightsail:GetLoadBalancer, lightsail:GetLoadBalancers, lightsail:GetLoadBalancerTlsCertificates, lightsail:GetStaticIp, lightsail:GetStaticIps, lookoutequipment:DescribeInferenceScheduler, lookoutequipment:ListTagsForResource, lookoutmetrics:DescribeAlert, lookoutmetrics:DescribeAnomalyDetector, lookoutmetrics:ListAlerts, lookoutmetrics:ListAnomalyDetectors, lookoutmetrics:ListMetricSets, lookoutmetrics:ListTagsForResource, lookoutvision:DescribeProject, lookoutvision:ListProjects, managedblockchain:GetMember, managedblockchain:GetNetwork, managedblockchain:GetNode, managedblockchain:ListInvitations, managedblockchain:ListMembers, managedblockchain:ListNodes, mediapackage-vod:DescribePackagingGroup, mediapackage-vod:ListPackagingGroups, mediapackage-vod:ListTagsForResource, mobiletargeting:GetInAppTemplate, mobiletargeting:ListTemplates, mq:DescribeBroker, mq:ListBrokers, nimble:GetLaunchProfile, nimble:GetLaunchProfileDetails, nimble:GetStreamingImage, nimble:GetStudio, nimble:GetStudioComponent, nimble:ListLaunchProfiles, nimble:ListStreamingImages, nimble:ListStudioComponents, nimble:ListStudios, profile:GetDomain, profile:GetIntegration, profile:GetProfileObjectType, profile:ListDomains, profile:ListIntegrations, profile:ListProfileObjectTypes, profile:ListTagsForResource, quicksight:DescribeAnalysis, quicksight:DescribeAnalysisPermissions, quicksight:DescribeDataSet, quicksight:DescribeDataSetPermissions, quicksight:DescribeTheme, quicksight:DescribeThemePermissions, quicksight:ListAnalyses, quicksight:ListDataSets, quicksight:ListThemes, resiliencehub:DescribeApp, resiliencehub:DescribeAppVersionTemplate, resiliencehub:DescribeResiliencyPolicy, resiliencehub:ListApps, resiliencehub:ListAppVersionResourceMappings, resiliencehub:ListResiliencyPolicies, route53-recovery-readiness:GetCell, route53-recovery-readiness:GetReadinessCheck, route53-recovery-readiness:GetRecoveryGroup, route53-recovery-readiness:GetResourceSet, route53-recovery-readiness:ListCells, route53-recovery-readiness:ListReadinessChecks, route53-recovery-readiness:ListRecoveryGroups, route53-recovery-readiness:ListResourceSets, route53resolver:GetFirewallDomainList, route53resolver:GetFirewallRuleGroup, route53resolver:GetFirewallRuleGroupAssociation, route53resolver:GetResolverQueryLogConfig, route53resolver:ListFirewallDomainLists, route53resolver:ListFirewallDomains, route53resolver:ListFirewallRuleGroupAssociations, route53resolver:ListFirewallRuleGroups, route53resolver:ListFirewallRules, route53resolver:ListResolverQueryLogConfigs, rum:GetAppMonitor, rum:GetAppMonitorData, rum:ListAppMonitors, rum:ListTagsForResource, s3-outposts:GetAccessPoint, s3-outposts:GetAccessPointPolicy, s3-outposts:GetBucket, s3-outposts:GetBucketPolicy, s3-outposts:GetBucketTagging, s3-outposts:GetLifecycleConfiguration, s3-outposts:ListAccessPoints, s3-outposts:ListEndpoints, s3-outposts:ListRegionalBuckets, schemas:DescribeDiscoverer, schemas:DescribeRegistry, schemas:DescribeSchema, schemas:ListDiscoverers, schemas:ListRegistries, schemas:ListSchemas, sdb:GetAttributes, sdb:ListDomains, ses:ListEmailTemplates, ses:ListReceiptFilters, ses:ListReceiptRuleSets, ses:ListTemplates, signer:GetSigningProfile, signer:ListProfilePermissions, signer:ListSigningProfiles, synthetics:DescribeCanaries, synthetics:DescribeCanariesLastRun, synthetics:DescribeRuntimeVersions, synthetics:GetCanary, synthetics:GetCanaryRuns, synthetics:ListTagsForResource, timestream:DescribeDatabase, timestream:DescribeTable, timestream:ListDatabases, timestream:ListTables, timestream:ListTagsForResource, transfer:DescribeServer, transfer:DescribeUser, transfer:DescribeWorkflow, transfer:ListServers, transfer:ListUsers, transfer:ListWorkflows, voiceid:DescribeDomain, and voiceid:ListTagsForResource |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon AppFlow, Amazon, Amazon CloudWatch RUM CloudWatch, Amazon CloudWatch Synthetics, Amazon Connect Customer Customer Voice ID, Amazon Connect Customer Voice ID, Amazon DevOps Guru, Amazon Elastic Compute Cloud (Amazon EC2), Amazon EC2 Auto Scaling, Amazon EMR, Amazon EventBridge, Amazon EventBridge Schemas Amazon FinSpace, Amazon Fraud Detector, Amazon GameLift Servers, Amazon Interactive Video Service (Amazon IVS), Amazon Managed Service per Apache Flink, EC2 Image Costruttore, Amazon Lex, Amazon Lightsail, Servizio di localizzazione Amazon, Amazon Lookout per apparecchiature, Amazon Lookout per metriche, Amazon Lookout per Vision, Amazon Managed Blockchain, Amazon MQ, Amazon Nimble StudioAmazon Pinpoint, Amazon Quick, Amazon Application Recovery Controller (ARC) Amazon Route 53 Resolver, Amazon Simple Storage Service (Amazon S3), Amazon SimpleDB, Amazon Simple Email Service (Amazon SES) AWS AppConfig AWS AppSync, Amazon Timestream AWS Auto Scaling AWS Backup AWS Budgets, AWS Cost Explorer, AWS Cloud9,, Servizio di directory AWS, AWS DataSync, AWS Elemental MediaPackage, AWS Glue, AWS IoT,, AWS IoT Analytics, AWS IoT Events, AWS IoT SiteWise, AWS IoT TwinMaker, AWS Lake Formation, AWS License Manager AWS Resilience Hub, AWS Signer, e AWS Transfer Family. |
7 settembre 2022 |
|
AWS_ConfigRole: aggiunta di appconfig:ListApplications, appflow:DescribeConnectorProfiles, appsync:GetApiCache, autoscaling-plans:DescribeScalingPlanResources, autoscaling-plans:DescribeScalingPlans, autoscaling-plans:GetScalingPlanResourceForecastData, autoscaling:DescribeWarmPool, backup:DescribeFramework, backup:DescribeReportPlan, backup:ListFrameworks, backup:ListReportPlans, budgets:DescribeBudgetAction, budgets:DescribeBudgetActionsForAccount, budgets:DescribeBudgetActionsForBudget, budgets:ViewBudget, ce:GetAnomalyMonitors, ce:GetAnomalySubscriptions, cloud9:DescribeEnvironmentMemberships, cloud9:DescribeEnvironments, cloud9:ListEnvironments, cloud9:ListTagsForResource, cloudwatch:GetMetricStream, cloudwatch:ListMetricStreams, datasync:DescribeLocationFsxWindows, devops-guru:GetResourceCollection, ds:DescribeDirectories, ec2:DescribeTrafficMirrorTargets, ec2:GetNetworkInsightsAccessScopeAnalysisFindings, ec2:GetNetworkInsightsAccessScopeContent, elasticmapreduce:DescribeStudio, elasticmapreduce:GetStudioSessionMapping, elasticmapreduce:ListStudios, elasticmapreduce:ListStudioSessionMappings, events:DescribeEndpoint, events:DescribeEventBus, events:DescribeRule, events:ListArchives, events:ListEndpoints, events:ListEventBuses, events:ListRules, events:ListTagsForResource, events:ListTargetsByRule, finspace:GetEnvironment, finspace:ListEnvironments, frauddetector:GetDetectors, frauddetector:GetDetectorVersion, frauddetector:GetEntityTypes, frauddetector:GetEventTypes, frauddetector:GetExternalModels, frauddetector:GetLabels, frauddetector:GetModels, frauddetector:GetOutcomes, frauddetector:GetVariables, frauddetector:ListTagsForResource, gamelift:DescribeAlias, gamelift:DescribeBuild, gamelift:DescribeFleetAttributes, gamelift:DescribeFleetCapacity, gamelift:DescribeFleetLocationAttributes, gamelift:DescribeFleetLocationCapacity, gamelift:DescribeFleetPortSettings, gamelift:DescribeGameServerGroup, gamelift:DescribeGameSessionQueues, gamelift:DescribeMatchmakingConfigurations, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeRuntimeConfiguration, gamelift:DescribeScript, gamelift:DescribeVpcPeeringAuthorizations, gamelift:ListAliases, gamelift:ListBuilds, gamelift:ListFleets, gamelift:ListGameServerGroups, gamelift:ListScripts, gamelift:ListTagsForResource, geo:ListMaps, glue:GetClassifier, glue:GetClassifiers, imagebuilder:GetContainerRecipe, imagebuilder:GetImage, imagebuilder:GetImagePipeline, imagebuilder:GetImageRecipe, imagebuilder:ListContainerRecipes, imagebuilder:ListImageBuildVersions, imagebuilder:ListImagePipelines, imagebuilder:ListImageRecipes, imagebuilder:ListImages, iot:DescribeCertificate, iot:DescribeDimension, iot:DescribeRoleAlias, iot:DescribeSecurityProfile, iot:GetPolicy, iot:GetTopicRule, iot:GetTopicRuleDestination, iot:ListCertificates, iot:ListDimensions, iot:ListPolicies, iot:ListRoleAliases, iot:ListSecurityProfiles, iot:ListSecurityProfilesForTarget, iot:ListTagsForResource, iot:ListTargetsForSecurityProfile, iot:ListTopicRuleDestinations, iot:ListTopicRules, iot:ListV2LoggingLevels, iot:ValidateSecurityProfileBehaviors, iotanalytics:DescribeChannel, iotanalytics:DescribeDataset, iotanalytics:DescribeDatastore, iotanalytics:DescribePipeline, iotanalytics:ListChannels, iotanalytics:ListDatasets, iotanalytics:ListDatastores, iotanalytics:ListPipelines, iotanalytics:ListTagsForResource, iotevents:DescribeAlarmModel, iotevents:DescribeDetectorModel, iotevents:DescribeInput, iotevents:ListAlarmModels, iotevents:ListDetectorModels, iotevents:ListInputs, iotevents:ListTagsForResource, iotsitewise:DescribeAccessPolicy, iotsitewise:DescribeAsset, iotsitewise:ListAccessPolicies, iotsitewise:ListAssets, iottwinmaker:GetEntity, iottwinmaker:GetScene, iottwinmaker:GetWorkspace, iottwinmaker:ListEntities, iottwinmaker:ListScenes, iottwinmaker:ListTagsForResource, iottwinmaker:ListWorkspaces, ivs:GetPlaybackKeyPair, ivs:GetRecordingConfiguration, ivs:GetStreamKey, ivs:ListChannels, ivs:ListPlaybackKeyPairs, ivs:ListRecordingConfigurations, ivs:ListStreamKeys, ivs:ListTagsForResource, kinesisanalytics:ListApplications, lakeformation:DescribeResource, lakeformation:GetDataLakeSettings, lakeformation:ListPermissions, lakeformation:ListResources, lex:DescribeBot, lex:DescribeBotAlias, lex:DescribeResourcePolicy, lex:ListBotAliases, lex:ListBotLocales, lex:ListBots, lex:ListTagsForResource, license-manager:GetGrant, license-manager:GetLicense, license-manager:ListDistributedGrants, license-manager:ListLicenses, license-manager:ListReceivedGrants, lightsail:GetAlarms, lightsail:GetBuckets, lightsail:GetCertificates, lightsail:GetDisk, lightsail:GetDisks, lightsail:GetInstance, lightsail:GetInstances, lightsail:GetKeyPair, lightsail:GetLoadBalancer, lightsail:GetLoadBalancers, lightsail:GetLoadBalancerTlsCertificates, lightsail:GetStaticIp, lightsail:GetStaticIps, lookoutequipment:DescribeInferenceScheduler, lookoutequipment:ListTagsForResource, lookoutmetrics:DescribeAlert, lookoutmetrics:DescribeAnomalyDetector, lookoutmetrics:ListAlerts, lookoutmetrics:ListAnomalyDetectors, lookoutmetrics:ListMetricSets, lookoutmetrics:ListTagsForResource, lookoutvision:DescribeProject, lookoutvision:ListProjects, managedblockchain:GetMember, managedblockchain:GetNetwork, managedblockchain:GetNode, managedblockchain:ListInvitations, managedblockchain:ListMembers, managedblockchain:ListNodes, mediapackage-vod:DescribePackagingGroup, mediapackage-vod:ListPackagingGroups, mediapackage-vod:ListTagsForResource, mobiletargeting:GetInAppTemplate, mobiletargeting:ListTemplates, mq:DescribeBroker, mq:ListBrokers, nimble:GetLaunchProfile, nimble:GetLaunchProfileDetails, nimble:GetStreamingImage, nimble:GetStudio, nimble:GetStudioComponent, nimble:ListLaunchProfiles, nimble:ListStreamingImages, nimble:ListStudioComponents, nimble:ListStudios, profile:GetDomain, profile:GetIntegration, profile:GetProfileObjectType, profile:ListDomains, profile:ListIntegrations, profile:ListProfileObjectTypes, profile:ListTagsForResource, quicksight:DescribeAnalysis, quicksight:DescribeAnalysisPermissions, quicksight:DescribeDataSet, quicksight:DescribeDataSetPermissions, quicksight:DescribeTheme, quicksight:DescribeThemePermissions, quicksight:ListAnalyses, quicksight:ListDataSets, quicksight:ListThemes, resiliencehub:DescribeApp, resiliencehub:DescribeAppVersionTemplate, resiliencehub:DescribeResiliencyPolicy, resiliencehub:ListApps, resiliencehub:ListAppVersionResourceMappings, resiliencehub:ListResiliencyPolicies, route53-recovery-readiness:GetCell, route53-recovery-readiness:GetReadinessCheck, route53-recovery-readiness:GetRecoveryGroup, route53-recovery-readiness:GetResourceSet, route53-recovery-readiness:ListCells, route53-recovery-readiness:ListReadinessChecks, route53-recovery-readiness:ListRecoveryGroups, route53-recovery-readiness:ListResourceSets, route53resolver:GetFirewallDomainList, route53resolver:GetFirewallRuleGroup, route53resolver:GetFirewallRuleGroupAssociation, route53resolver:GetResolverQueryLogConfig, route53resolver:ListFirewallDomainLists, route53resolver:ListFirewallDomains, route53resolver:ListFirewallRuleGroupAssociations, route53resolver:ListFirewallRuleGroups, route53resolver:ListFirewallRules, route53resolver:ListResolverQueryLogConfigs, rum:GetAppMonitor, rum:GetAppMonitorData, rum:ListAppMonitors, rum:ListTagsForResource, s3-outposts:GetAccessPoint, s3-outposts:GetAccessPointPolicy, s3-outposts:GetBucket, s3-outposts:GetBucketPolicy, s3-outposts:GetBucketTagging, s3-outposts:GetLifecycleConfiguration, s3-outposts:ListAccessPoints, s3-outposts:ListEndpoints, s3-outposts:ListRegionalBuckets, schemas:DescribeDiscoverer, schemas:DescribeRegistry, schemas:DescribeSchema, schemas:ListDiscoverers, schemas:ListRegistries, schemas:ListSchemas, sdb:GetAttributes, sdb:ListDomains, ses:ListEmailTemplates, ses:ListReceiptFilters, ses:ListReceiptRuleSets, ses:ListTemplates, signer:GetSigningProfile, signer:ListProfilePermissions, signer:ListSigningProfiles, synthetics:DescribeCanaries, synthetics:DescribeCanariesLastRun, synthetics:DescribeRuntimeVersions, synthetics:GetCanary, synthetics:GetCanaryRuns, synthetics:ListTagsForResource, timestream:DescribeDatabase, timestream:DescribeTable, timestream:ListDatabases, timestream:ListTables, timestream:ListTagsForResource, transfer:DescribeServer, transfer:DescribeUser, transfer:DescribeWorkflow, transfer:ListServers, transfer:ListUsers, transfer:ListWorkflows, voiceid:DescribeDomain, and voiceid:ListTagsForResource |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon AppFlow, Amazon, Amazon CloudWatch RUM CloudWatch, Amazon CloudWatch Synthetics, Amazon Connect Customer Customer Voice ID, Amazon Connect Customer Voice ID, Amazon DevOps Guru, Amazon Elastic Compute Cloud (Amazon EC2), Amazon EC2 Auto Scaling, Amazon EMR, Amazon, Amazon EventBridge Schemas EventBridge, Amazon Fraud Detector Amazon FinSpace, Amazon GameLift Servers, Amazon Interactive Video Service (Amazon IVS), Amazon Managed Service per Apache Flink, EC2 Image Costruttore, Amazon Lex, Amazon Lightsail, Servizio di localizzazione Amazon, Amazon Lookout per apparecchiature, Amazon Lookout per metriche, Amazon Lookout per Vision, Amazon Managed Blockchain, Amazon MQ, Amazon Nimble StudioAmazon Pinpoint, Amazon Quick, Amazon Application Recovery Controller (ARC) Amazon Route 53 Resolver, Amazon Simple Storage Service (Amazon S3), Amazon SimpleDB, Amazon Simple Email Service (Amazon SES) AWS AppConfig AWS AppSync, Amazon Timestream AWS Auto Scaling AWS Backup AWS Budgets, AWS Cost Explorer, AWS Cloud9,, Servizio di directory AWS, AWS DataSync, AWS Elemental MediaPackage, AWS Glue, AWS IoT,, AWS IoT Analytics, AWS IoT Events, AWS IoT SiteWise, AWS IoT TwinMaker, AWS Lake Formation AWS License Manager, AWS Resilience Hub, AWS Signer, e AWS Transfer Family |
7 settembre 2022 |
|
AWSConfigServiceRolePolicy: aggiunta di datasync:ListAgents, datasync:ListLocations, datasync:ListTasks, servicediscovery:ListNamespaces, servicediscovery:ListServices, and ses:ListContactLists |
Questa politica ora concede l'autorizzazione a restituire un elenco di AWS DataSync agenti, posizioni di DataSync origine e destinazione e DataSync attività in un Account AWS; elenca informazioni di riepilogo sui AWS Cloud Map namespace e i servizi associati a uno o più namespace specificati in un Account AWS; ed elenca tutti gli elenchi di contatti Amazon Simple Email Service (Amazon SES) disponibili in. Account AWS |
22 agosto 2022 |
|
AWS_ConfigRole: aggiunta di datasync:ListAgents, datasync:ListLocations, datasync:ListTasks, servicediscovery:ListNamespaces, servicediscovery:ListServices, and ses:ListContactLists |
Questa politica ora concede l'autorizzazione a restituire un elenco di AWS DataSync agenti, posizioni di DataSync origine e destinazione e DataSync attività in un Account AWS; elenca informazioni di riepilogo sui AWS Cloud Map namespace e i servizi associati a uno o più namespace specificati in un Account AWS; ed elenca tutti gli elenchi di contatti Amazon Simple Email Service (Amazon SES) disponibili in Account AWS. |
22 agosto 2022 |
|
ConfigConformsServiceRolePolicy: aggiunta di cloudwatch:PutMetricData |
Questa politica ora concede l'autorizzazione a pubblicare punti di dati metrici su Amazon. CloudWatch |
25 luglio 2022 |
|
AWSConfigServiceRolePolicy: aggiunta di amplifyuibuilder:ExportThemes, amplifyuibuilder:GetTheme, appconfig:GetApplication, appconfig:GetApplication, appconfig:GetConfigurationProfile, appconfig:GetConfigurationProfile, appconfig:GetDeployment, appconfig:GetDeploymentStrategy, appconfig:GetEnvironment, appconfig:GetHostedConfigurationVersion, appconfig:ListTagsForResource, appsync:GetGraphqlApi, appsync:ListGraphqlApis, billingconductor: ListPricingRulesAssociatedToPricingPlan, billingconductor:ListAccountAssociations, billingconductor:ListBillingGroups, billingconductor:ListCustomLineItems, billingconductor:ListPricingPlans, billingconductor:ListPricingRules, billingconductor:ListTagsForResource, datasync:DescribeAgent, datasync:DescribeLocationEfs, datasync:DescribeLocationFsxLustre, datasync:DescribeLocationHdfs, datasync:DescribeLocationNfs, datasync:DescribeLocationObjectStorage, datasync:DescribeLocationS3, datasync:DescribeLocationSmb, datasync:DescribeTask, datasync:ListTagsForResource, ecr:DescribePullThroughCacheRules, ecr:DescribeRegistry, ecr:GetRegistryPolicy, elasticache:DescribeCacheParameters, elasticloadbalancing:DescribeListenerCertificates, elasticloadbalancing:DescribeTargetGroupAttributes, elasticloadbalancing:DescribeTargetGroups, elasticloadbalancing:DescribeTargetHealth, events:DescribeApiDestination, events:DescribeArchive, fms:GetNotificationChannel, fms:GetPolicy, fms:ListPolicies, fms:ListTagsForResource, fsx:DescribeVolumes, geo:DescribeGeofenceCollection, geo:DescribeMap, geo:DescribePlaceIndex, geo:DescribeRouteCalculator, geo:DescribeTracker, geo:ListTrackerConsumers, glue:BatchGetJobs, glue:BatchGetWorkflows, glue:GetCrawler, glue:GetCrawlers, glue:GetJob, glue:GetJobs, glue:GetWorkflow, imagebuilder: GetComponent, imagebuilder: ListComponentBuildVersions, imagebuilder: ListComponents, imagebuilder:GetDistributionConfiguration, imagebuilder:GetInfrastructureConfiguration, imagebuilder:ListDistributionConfigurations, imagebuilder:ListInfrastructureConfigurations, kafka:DescribeClusterV2, kafka:ListClustersV2, kinesisanalytics:DescribeApplication, kinesisanalytics:ListTagsForResource, quicksight:DescribeDataSource, quicksight:DescribeDataSourcePermissions, quicksight:ListTagsForResource, rekognition:DescribeStreamProcessor, rekognition:ListTagsForResource, robomaker:DescribeRobotApplication, robomaker:DescribeSimulationApplication, s3:GetStorageLensConfiguration, s3:GetStorageLensConfigurationTagging, servicediscovery:GetInstance, servicediscovery:GetNamespace, servicediscovery:GetService, servicediscovery:ListTagsForResource, ses:DescribeReceiptRule, ses:DescribeReceiptRuleSet, ses:GetContactList, ses:GetEmailTemplate, ses:GetTemplate, and sso:GetInlinePolicyForPermissionSet |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Elastic Container Service (Amazon ECS), Amazon ElastiCache, Amazon FSx EventBridge, Amazon Managed Service per Apache Flink, Amazon Location Service, Amazon Managed Streaming per Apache Kafka, Amazon Quick, Amazon Rekognition, AWS RoboMaker, Amazon Simple Storage Service (Amazon S3), Amazon Simple Email Service (Amazon SES), AWS Amplify, AWS AppConfig,, AWS AppSync, AWS Billing Conductor, AWS DataSync AWS Firewall Manager AWS Glue, Centro identità AWS IAM (IAM Identity Center), EC2 Image Builder ed Elastic Load Balancing. |
15 luglio 2022 |
|
AWS_ConfigRole: aggiunta di amplifyuibuilder:ExportThemes, amplifyuibuilder:GetTheme, appconfig:GetApplication, appconfig:GetApplication, appconfig:GetConfigurationProfile, appconfig:GetConfigurationProfile, appconfig:GetDeployment, appconfig:GetDeploymentStrategy, appconfig:GetEnvironment, appconfig:GetHostedConfigurationVersion, appconfig:ListTagsForResource, appsync:GetGraphqlApi, appsync:ListGraphqlApis, billingconductor: ListPricingRulesAssociatedToPricingPlan, billingconductor:ListAccountAssociations, billingconductor:ListBillingGroups, billingconductor:ListCustomLineItems, billingconductor:ListPricingPlans, billingconductor:ListPricingRules, billingconductor:ListTagsForResource, datasync:DescribeAgent, datasync:DescribeLocationEfs, datasync:DescribeLocationFsxLustre, datasync:DescribeLocationHdfs, datasync:DescribeLocationNfs, datasync:DescribeLocationObjectStorage, datasync:DescribeLocationS3, datasync:DescribeLocationSmb, datasync:DescribeTask, datasync:ListTagsForResource, ecr:DescribePullThroughCacheRules, ecr:DescribeRegistry, ecr:GetRegistryPolicy, elasticache:DescribeCacheParameters, elasticloadbalancing:DescribeListenerCertificates, elasticloadbalancing:DescribeTargetGroupAttributes, elasticloadbalancing:DescribeTargetGroups, elasticloadbalancing:DescribeTargetHealth, events:DescribeApiDestination, events:DescribeArchive, fms:GetNotificationChannel, fms:GetPolicy, fms:ListPolicies, fms:ListTagsForResource, fsx:DescribeVolumes, geo:DescribeGeofenceCollection, geo:DescribeMap, geo:DescribePlaceIndex, geo:DescribeRouteCalculator, geo:DescribeTracker, geo:ListTrackerConsumers, glue:BatchGetJobs, glue:BatchGetWorkflows, glue:GetCrawler, glue:GetCrawlers, glue:GetJob, glue:GetJobs, glue:GetWorkflow, imagebuilder: GetComponent, imagebuilder: ListComponentBuildVersions, imagebuilder: ListComponents, imagebuilder:GetDistributionConfiguration, imagebuilder:GetInfrastructureConfiguration, imagebuilder:ListDistributionConfigurations, imagebuilder:ListInfrastructureConfigurations, kafka:DescribeClusterV2, kafka:ListClustersV2, kinesisanalytics:DescribeApplication, kinesisanalytics:ListTagsForResource, quicksight:DescribeDataSource, quicksight:DescribeDataSourcePermissions, quicksight:ListTagsForResource, rekognition:DescribeStreamProcessor, rekognition:ListTagsForResource, robomaker:DescribeRobotApplication, robomaker:DescribeSimulationApplication, s3:GetStorageLensConfiguration, s3:GetStorageLensConfigurationTagging, servicediscovery:GetInstance, servicediscovery:GetNamespace, servicediscovery:GetService, servicediscovery:ListTagsForResource, ses:DescribeReceiptRule, ses:DescribeReceiptRuleSet, ses:GetContactList, ses:GetEmailTemplate, ses:GetTemplate, and sso:GetInlinePolicyForPermissionSet |
Questa politica ora supporta autorizzazioni aggiuntive per Amazon Elastic Container Service (Amazon ECS), Amazon ElastiCache, Amazon FSx EventBridge, Amazon Managed Service per Apache Flink, Amazon Location Service, Amazon Managed Streaming per Apache Kafka, Amazon Quick, Amazon Rekognition, AWS RoboMaker, Amazon Simple Storage Service (Amazon S3), Amazon Simple Email Service (Amazon SES), AWS Amplify, AWS AppConfig,, AWS AppSync, AWS Billing Conductor, AWS DataSync AWS Firewall Manager AWS Glue, Centro identità AWS IAM (IAM Identity Center), EC2 Image Builder ed Elastic Load Balancing. |
15 luglio 2022 |
|
AWSConfigServiceRolePolicy: aggiunta di athena:GetDataCatalog, athena:ListDataCatalogs, athena:ListTagsForResource, detective:ListGraphs, detective:ListTagsForResource, glue:BatchGetDevEndpoints, glue:GetDevEndpoint, glue:GetDevEndpoints, glue:GetSecurityConfiguration, glue:GetSecurityConfigurations, glue:GetTags glue:GetWorkGroup, glue:ListCrawlers, glue:ListDevEndpoints, glue:ListJobs, glue:ListMembers, glue:ListWorkflows, glue:ListWorkGroups, guardduty:GetFilter, guardduty:GetIPSet, guardduty:GetThreatIntelSet, guardduty:GetMembers, guardduty:ListFilters, guardduty:ListIPSets, guardduty:ListTagsForResource, guardduty:ListThreatIntelSets, macie:GetMacieSession, ram:GetResourceShareAssociations, ram:GetResourceShares, ses:GetConfigurationSet, ses:GetConfigurationSetEventDestinations, ses:ListConfigurationSets, sso:DescribeInstanceAccessControlAttributeConfiguration, sso:DescribePermissionSet, sso:ListManagedPoliciesInPermissionSet, sso:ListPermissionSets, and sso:ListTagsForResource |
Questa politica ora concede il permesso di ottenere un catalogo dati Amazon Athena specificato, elencare i cataloghi di dati Athena in un Account AWS ed elencare i tag associati a un gruppo di lavoro o a una risorsa del catalogo dati Athena; ottenere un elenco di grafici comportamentali di Amazon Detective ed elencare i tag per un grafico del comportamento di Detective; ottenere un elenco di metadati delle risorse per un determinato elenco di AWS Glue nomi di endpoint di AWS Glue sviluppo, ottenere informazioni su uno specifico endpoint di AWS Glue
sviluppo, ottenere tutti gli endpoint di sviluppo in an Account AWS, recupera una AWS Glue sicurezza specificata configurazione, ottieni tutte le configurazioni di AWS Glue sicurezza, ottieni un elenco di tag associati a una AWS Glue risorsa, ottieni informazioni su un AWS Glue gruppo di lavoro con il nome specificato, recupera i nomi di tutte le risorse del AWS Glue crawler in un AWS
account, ottieni i nomi di tutte le AWS Glue |
31 maggio 2022 |
|
AWS_ConfigRole: aggiunta di athena:GetDataCatalog, athena:ListDataCatalogs, athena:ListTagsForResource, detective:ListGraphs, detective:ListTagsForResource, glue:BatchGetDevEndpoints, glue:GetDevEndpoint, glue:GetDevEndpoints, glue:GetSecurityConfiguration, glue:GetSecurityConfigurations, glue:GetTags glue:GetWorkGroup, glue:ListCrawlers, glue:ListDevEndpoints, glue:ListJobs, glue:ListMembers, glue:ListWorkflows, glue:ListWorkGroups, guardduty:GetFilter, guardduty:GetIPSet, guardduty:GetThreatIntelSet, guardduty:GetMembers, guardduty:ListFilters, guardduty:ListIPSets, guardduty:ListTagsForResource, guardduty:ListThreatIntelSets, macie:GetMacieSession, ram:GetResourceShareAssociations, ram:GetResourceShares, ses:GetConfigurationSet, ses:GetConfigurationSetEventDestinations, ses:ListConfigurationSets, sso:DescribeInstanceAccessControlAttributeConfiguration, sso:DescribePermissionSet, sso:ListManagedPoliciesInPermissionSet, sso:ListPermissionSets, and sso:ListTagsForResource |
Questa politica ora concede il permesso di ottenere un catalogo dati Amazon Athena specificato, elencare i cataloghi di dati Athena in un ed elencare i tag associati a un Account AWS gruppo di lavoro o a una risorsa del catalogo dati Athena; ottenere un elenco di grafici comportamentali di Amazon Detective ed elencare i tag per un grafico del comportamento di Detective; ottenere un elenco di metadati delle risorse per un determinato elenco di nomi di endpoint di AWS Glue sviluppo, ottenere informazioni su uno specifico endpoint di sviluppo, ottenere tutti gli endpoint di AWS Glue sviluppo in an, recupera una sicurezza specificata AWS Glue
Account AWS AWS Glue configurazione, ottieni tutte le configurazioni di AWS Glue sicurezza, ottieni un elenco di tag associati a una AWS Glue risorsa, ottieni informazioni su un AWS Glue gruppo di lavoro con il nome specificato, recupera i nomi di tutte le risorse del AWS Glue crawler in un AWS
account, ottieni i nomi di tutte le AWS Glue |
31 maggio 2022 |
|
AWSConfigServiceRolePolicy: aggiunta di cloudformation:GetResource, cloudformation:ListResources, cloudtrail:GetEventDataStore, cloudtrail:ListEventDataStores, dax:DescribeParameterGroups, dax:DescribeParameters, dax:DescribeSubnetGroups, DMS:DescribeReplicationTasks, and organizations:ListPolicies |
Questa politica ora consente di ottenere informazioni su tutti o su uno specifico AWS CloudTrail Event Data Store (EDS), ottenere informazioni su tutte o una determinata AWS CloudFormation risorsa, ottenere un elenco di un gruppo di parametri o di un gruppo di sottoreti di DynamoDB Accelerator (DAX), ottenere informazioni su AWS Database Migration Service (AWS DMS) attività di replica per il proprio account nella regione corrente a cui si accede e ottenere un elenco di tutte le politiche di un tipo specificato. AWS Organizations |
7 aprile 2022 |
|
AWS_ConfigRole: aggiunta di cloudformation:GetResource, cloudformation:ListResources, cloudtrail:GetEventDataStore, cloudtrail:ListEventDataStores, dax:DescribeParameterGroups, dax:DescribeParameters, dax:DescribeSubnetGroups, DMS:DescribeReplicationTasks, and organizations:ListPolicies |
Questa policy ora concede l'autorizzazione a ottenere informazioni su tutti o uno specifico AWS CloudTrail event data store (EDS), ottenere informazioni su tutte o una specifica AWS CloudFormation risorsa, ottenere un elenco di un gruppo di parametri o di un gruppo di sottorete di DynamoDB Accelerator (DAX), ottenere informazioni sulle AWS Database Migration Service (AWS DMS) attività di replica per il tuo account nella regione corrente a cui si accede e ottenere un elenco di tutte le politiche AWS Organizations di un tipo specificato. |
7 aprile 2022 |
|
AWSConfigServiceRolePolicy: aggiunta di backup-gateway:ListTagsForResource, backup-gateway:ListVirtualMachines, batch:DescribeComputeEnvironments, batch:DescribeJobQueues, batch:ListTagsForResource, dax:ListTags, dms:DescribeCertificates, dynamodb:DescribeGlobalTable, dynamodb:DescribeGlobalTableSettings, ec2:DescribeClientVpnAuthorizationRules, ec2:DescribeClientVpnEndpoints, ec2:DescribeDhcpOptions, ec2:DescribeFleets, ec2:DescribeNetworkAcls, ec2:DescribePlacementGroups, ec2:DescribeSpotFleetRequests, ec2:DescribeVolumeAttribute, ec2:DescribeVolumes, eks:DescribeFargateProfile, eks:ListFargateProfiles, eks:ListTagsForResource, fsx:ListTagsForResource, guardduty:ListOrganizationAdminAccounts, kms:ListAliases, opsworks:DescribeLayers, opsworks:DescribeStacks, opsworks:ListTags, rds:DescribeDBClusterParameterGroups, rds:DescribeDBClusterParameters, states:DescribeActivity, states:ListActivities, wafv2:GetRuleGroup, wafv2:ListRuleGroups, wafv2:ListTagsForResource, workspaces:DescribeConnectionAliases, workspaces:DescribeTags, and workspaces:DescribeWorkspaces |
Questa policy ora supporta autorizzazioni aggiuntive per AWS Backup, AWS Batch, DynamoDB Accelerator AWS Database Migration Service, Amazon DynamoDB, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Elastic Kubernetes Service, Amazon FSx, Amazon GuardDuty, AWS Key Management Service, AWS OpsWorks, Amazon Relational Database Service, AWS WAF V2 e Amazon WorkSpaces. |
14 marzo 2022 |
|
AWS_ConfigRole: aggiunta di backup-gateway:ListTagsForResource, backup-gateway:ListVirtualMachines, batch:DescribeComputeEnvironments, batch:DescribeJobQueues, batch:ListTagsForResource, dax:ListTags, dms:DescribeCertificates, dynamodb:DescribeGlobalTable, dynamodb:DescribeGlobalTableSettings, ec2:DescribeClientVpnAuthorizationRules, ec2:DescribeClientVpnEndpoints, ec2:DescribeDhcpOptions, ec2:DescribeFleets, ec2:DescribeNetworkAcls, ec2:DescribePlacementGroups, ec2:DescribeSpotFleetRequests, ec2:DescribeVolumeAttribute, ec2:DescribeVolumes, eks:DescribeFargateProfile, eks:ListFargateProfiles, eks:ListTagsForResource, fsx:ListTagsForResource, guardduty:ListOrganizationAdminAccounts, kms:ListAliases, opsworks:DescribeLayers, opsworks:DescribeStacks, opsworks:ListTags, rds:DescribeDBClusterParameterGroups, rds:DescribeDBClusterParameters, states:DescribeActivity, states:ListActivities, wafv2:GetRuleGroup, wafv2:ListRuleGroups, wafv2:ListTagsForResource, workspaces:DescribeConnectionAliases, workspaces:DescribeTags, and workspaces:DescribeWorkspaces |
Questa policy ora supporta autorizzazioni aggiuntive per AWS Backup, AWS Batch, DynamoDB Accelerator AWS Database Migration Service, Amazon DynamoDB, Amazon Elastic Compute Cloud (Amazon EC2), Amazon Elastic Kubernetes Service, Amazon FSx, Amazon GuardDuty, AWS Key Management Service, AWS OpsWorks, Amazon Relational Database Service, AWS WAF V2 e Amazon WorkSpaces. |
14 marzo 2022 |
|
AWSConfigServiceRolePolicy: aggiunta di elasticbeanstalk:DescribeEnvironments, elasticbeanstalk:DescribeConfigurationSettings, account:GetAlternateContact, organizations:DescribePolicy, organizations:ListParents, organizations:ListPoliciesForTarget, es:GetCompatibleElasticsearchVersions, rds:DescribeOptionGroups, rds:DescribeOptionGroups, es:GetCompatibleVersions, codedeploy:GetDeploymentConfig, ecr-public:GetRepositoryPolicy, access-analyzer:GetArchiveRule, and ecs:ListTaskDefinitionFamilies |
Questa policy ora consente di ottenere dettagli sugli ambienti Elastic Beanstalk e una descrizione delle impostazioni per il set di configurazione Elastic Beanstalk specificato, ottenere una mappa OpenSearch o le versioni di Elasticsearch, descrivere i gruppi di opzioni Amazon RDS disponibili per un database e ottenere informazioni su una configurazione di CodeDeploy distribuzione. Questa policy ora consente inoltre di recuperare il contatto alternativo specificato collegato a un Account AWS, recuperare informazioni su una policy, recuperare una AWS Organizations policy del repository Amazon ECR, recuperare informazioni su una AWS Config regola archiviata, recuperare un elenco di famiglie di definizioni di attività Amazon ECS, elencare le unità organizzative (OU) radice o padre dell'unità organizzativa o dell'account figlio specificato ed elencare le politiche collegate alla radice, all'unità organizzativa o all'account di destinazione specificato. |
10 febbraio 2022 |
|
AWS_ConfigRole: aggiunta di elasticbeanstalk:DescribeEnvironments, elasticbeanstalk:DescribeConfigurationSettings, account:GetAlternateContact, organizations:DescribePolicy, organizations:ListParents, organizations:ListPoliciesForTarget, es:GetCompatibleElasticsearchVersions, rds:DescribeOptionGroups, rds:DescribeOptionGroups, es:GetCompatibleVersions, codedeploy:GetDeploymentConfig, ecr-public:GetRepositoryPolicy, access-analyzer:GetArchiveRule, and ecs:ListTaskDefinitionFamilies |
Questa policy ora consente di ottenere dettagli sugli ambienti Elastic Beanstalk e una descrizione delle impostazioni per il set di configurazione Elastic Beanstalk specificato, ottenere una mappa OpenSearch o le versioni di Elasticsearch, descrivere i gruppi di opzioni Amazon RDS disponibili per un database e ottenere informazioni su una configurazione di CodeDeploy distribuzione. Questa policy ora consente inoltre di recuperare il contatto alternativo specificato collegato a un Account AWS, recuperare informazioni su una policy, recuperare una AWS Organizations policy del repository Amazon ECR, recuperare informazioni su una AWS Config regola archiviata, recuperare un elenco di famiglie di definizioni di attività Amazon ECS, elencare le unità organizzative (OU) radice o padre dell'unità organizzativa o dell'account figlio specificato ed elencare le politiche collegate alla radice, all'unità organizzativa o all'account di destinazione specificato. |
10 febbraio 2022 |
|
AWSConfigServiceRolePolicy: aggiunta di logs:CreateLogStream, logs:CreateLogGroup, and logs:PutLogEvent |
Questa policy ora concede l'autorizzazione a creare gruppi e flussi di CloudWatch log Amazon e a scrivere log nei flussi di log creati. |
15 dicembre 2021 |
|
AWS_ConfigRole: aggiunta di logs:CreateLogStream, logs:CreateLogGroup, and logs:PutLogEvent |
Questa politica ora concede l'autorizzazione a creare gruppi e flussi di CloudWatch log Amazon e a scrivere log nei flussi di log creati. |
15 dicembre 2021 |
|
AWSConfigServiceRolePolicy: aggiunta di es:DescribeDomain, es:DescribeDomains, rds:DescribeDBParameters, and, elasticache:DescribeSnapshots |
Questa politica ora concede l'autorizzazione a ottenere dettagli su un Amazon OpenSearch Service (OpenSearch Service) domain/domains e a ottenere un elenco dettagliato di parametri per un particolare gruppo di parametri DB di Amazon Relational Database Service (Amazon RDS). Questa politica concede inoltre il permesso di ottenere dettagli sugli snapshot di Amazon. ElastiCache |
08 settembre 2021 |
|
AWS_ConfigRole: aggiunta di es:DescribeDomain, es:DescribeDomains, rds:DescribeDBParameters, and, elasticache:DescribeSnapshots |
Questa politica ora concede l'autorizzazione a ottenere dettagli su un Amazon OpenSearch Service (OpenSearch Service) domain/domains e a ottenere un elenco dettagliato dei parametri per un particolare gruppo di parametri DB di Amazon Relational Database Service (Amazon RDS). Questa politica concede inoltre il permesso di ottenere dettagli sugli snapshot di Amazon. ElastiCache |
08 settembre 2021 |
|
AWSConfigServiceRolePolicy— Aggiungere e aggiungere logs:ListTagsLogGroup, states:ListTagsForResource, states:ListStateMachines, states:DescribeStateMachine autorizzazioni aggiuntive per i tipi di risorse AWS |
Questa policy ora concede l'autorizzazione per elencare i tag per un gruppo di log, elencare i tag per una macchina a stati ed elencare tutte le macchine a stati. Questa policy ora concede l'autorizzazione per ottenere i dettagli su una macchina a stati. Questa policy ora supporta anche autorizzazioni aggiuntive per Amazon EC2 Systems Manager (SSM), Amazon Elastic Container Registry, Amazon FSx, Amazon Data Firehose, Amazon Managed Streaming for Apache Kafka (Amazon MSK), Amazon Relational Database Service (Amazon RDS), Amazon Route 53, Amazon AI, Amazon Simple Notification Service e. SageMaker AWS Database Migration Service AWS Global Accelerator Gateway di archiviazione AWS |
28 luglio 2021 |
|
AWS_ConfigRole— AWS Aggiungere l e autorizzazioni aggiuntive per i tipi di risorse ogs:ListTagsLogGroup, states:ListTagsForResource, states:ListStateMachines, states:DescribeStateMachine |
Questa policy ora concede l'autorizzazione per elencare i tag per un gruppo di log, elencare i tag per una macchina a stati ed elencare tutte le macchine a stati. Questa policy ora concede l'autorizzazione per ottenere i dettagli su una macchina a stati. Questa policy ora supporta anche autorizzazioni aggiuntive per Amazon EC2 Systems Manager (SSM), Amazon Elastic Container Registry, Amazon FSx, Amazon Data Firehose, Amazon Managed Streaming for Apache Kafka (Amazon MSK), Amazon Relational Database Service (Amazon RDS), Amazon Route 53, Amazon AI, Amazon Simple Notification Service e. SageMaker AWS Database Migration Service AWS Global Accelerator Gateway di archiviazione AWS |
28 luglio 2021 |
|
AWSConfigServiceRolePolicy— ssm:DescribeDocumentPermission Aggiungere AWS autorizzazioni aggiuntive per i tipi di risorse |
Questa policy ora concede l'autorizzazione per visualizzare le autorizzazioni dei documenti AWS Systems Manager e le informazioni su IAM Access Analyzer. Questa policy ora supporta tipi di AWS risorse aggiuntivi per Amazon Kinesis, Amazon, Amazon EMR ElastiCache AWS Network Firewall, Amazon Route 53 e Amazon Relational Database Service (Amazon RDS). Queste modifiche alle autorizzazioni consentono di AWS Config richiamare le API di sola lettura necessarie per supportare questi tipi di risorse. Questa policy ora supporta anche il filtraggio delle funzioni Lambda @Edge per la regola gestita lambda-inside-vpc. https://docs.aws.amazon.com/config/latest/developerguide/lambda-inside-vpc.html AWS Config |
08 giugno 2021 |
|
AWS_ConfigRole— Aggiungere autorizzazioni aggiuntive per i tipi di risorse ssm:DescribeDocumentPermission AWS |
Questa policy ora concede l'autorizzazione per visualizzare le autorizzazioni dei documenti AWS Systems Manager e le informazioni su IAM Access Analyzer. Questa policy ora supporta tipi di AWS risorse aggiuntivi per Amazon Kinesis, Amazon, Amazon EMR ElastiCache AWS Network Firewall, Amazon Route 53 e Amazon Relational Database Service (Amazon RDS). Queste modifiche alle autorizzazioni consentono di AWS Config richiamare le API di sola lettura necessarie per supportare questi tipi di risorse. Questa policy ora supporta anche il filtraggio delle funzioni Lambda @Edge per la regola gestita lambda-inside-vpc. https://docs.aws.amazon.com/config/latest/developerguide/lambda-inside-vpc.html AWS Config |
08 giugno 2021 |
|
AWSConfigServiceRolePolicy: aggiunta dell'autorizzazione apigateway:GET per effettuare chiamate GET di sola lettura a Gateway API e delle autorizzazioni s3:GetAccessPointPolicy e s3:GetAccessPointPolicyStatus per richiamare le API di sola lettura di Amazon S3 |
Questa policy ora concede le autorizzazioni che consentono di effettuare chiamate GET in sola lettura AWS Config ad API Gateway per supportare una regola per API Gateway. AWS Config La policy aggiunge anche le autorizzazioni che consentono di AWS Config richiamare le API di sola lettura di Amazon Simple Storage Service (Amazon S3), necessarie per supportare il nuovo tipo di risorsa. |
10 maggio 2021 |
|
AWS_ ConfigRole: aggiunge l'apigateway:GETautorizzazione per effettuare chiamate GET in sola lettura ad API Gateway e l'autorizzazione e l'autorizzazione per richiamare le API di sola lettura di Amazon S3 s3:GetAccessPointPolicy s3:GetAccessPointPolicyStatus |
Questa policy ora concede le autorizzazioni che consentono di effettuare chiamate GET in sola lettura ad API Gateway AWS Config per supportare un for API Gateway. AWS Config La policy aggiunge anche le autorizzazioni che consentono di AWS Config richiamare le API di sola lettura di Amazon Simple Storage Service (Amazon S3), necessarie per supportare il nuovo tipo di risorsa. |
10 maggio 2021 |
|
AWSConfigServiceRolePolicy— Aggiungere ssm:ListDocuments autorizzazioni e autorizzazioni aggiuntive per i tipi di risorse AWS |
Questa policy ora concede l'autorizzazione per visualizzare le informazioni relative ai documenti AWS Systems Manager specificati. Questa policy ora supporta anche tipi di AWS risorse aggiuntivi per AWS Backup Amazon Elastic File System, Amazon ElastiCache, Amazon Simple Storage Service (Amazon S3), Amazon Elastic Compute Cloud (Amazon EC2), Amazon Kinesis, Amazon SageMaker AI e Amazon Route 53 AWS Database Migration Service. Queste modifiche alle autorizzazioni consentono di AWS Config richiamare le API di sola lettura necessarie per supportare questi tipi di risorse. |
1° aprile 2021 |
|
AWS_ConfigRole— Aggiungere ssm:ListDocuments autorizzazioni e autorizzazioni aggiuntive per i tipi di risorse AWS |
Questa policy ora concede l'autorizzazione per visualizzare le informazioni relative ai documenti AWS Systems Manager specificati. Questa policy ora supporta anche tipi di AWS risorse aggiuntivi per AWS Backup Amazon Elastic File System, Amazon ElastiCache, Amazon Simple Storage Service (Amazon S3), Amazon Elastic Compute Cloud (Amazon EC2), Amazon Kinesis, Amazon SageMaker AI e Amazon Route 53 AWS Database Migration Service. Queste modifiche alle autorizzazioni consentono di AWS Config richiamare le API di sola lettura necessarie per supportare questi tipi di risorse. |
1° aprile 2021 |
|
|
|
1° aprile 2021 |
|
AWS Config ha iniziato a tenere traccia delle modifiche |
AWS Config ha iniziato a tenere traccia delle modifiche relative alle politiche AWS gestite. |
1° aprile 2021 |
