IAMTrail

Unofficial

AWS silently updates Managed IAM policies all the time.
We archive every published version.

Full version history and diffs for 1677 AWS Managed IAM Policies, archived since 2019. | A service by zoph.io

re:Invent 2026

7 new AWS services and 386 never-before-seen actions since October 1. Conference Nov 30 - Dec 4, 2026 in Las Vegas. 47 pre-re:Invent announcements on What's New.

This week: changes that matter

New AWS services, never-before-seen actions, permissions management, new and removed policies. Last 7 days as of Nov 6, 2026.

SupportUserv12updated

13 actions added

160626a
New AWS service support-console
ReadOnlyAccessv191updated

49 actions added

4f7ba36
New AWS service startups
3 never-before-seen actions: bedrock-agentcore:GetPaymentInstrumentBalance, bedrock-mantle:CountTokens, bedrock:RenderPrompt
AWSPartnerCentralOpportunityManagementv12updated

1 action added

1bdf5d2
1 never-before-seen action: partnercentral:SearchOpportunities
AWSCompromisedKeyQuarantineV4v1new policy

179 actions added

4273d6f
26 never-before-seen actions: apprunner:CreateService, apprunner:DeleteService, apprunner:ResumeService, apprunner:StartDeployment, apprunner:TagResource, apprunner:UntagResource, apprunner:UpdateService, backup:DeleteBackupVault, backup:DeleteRecoveryPoint, ecs:CreateDaemon, ecs:CreateExpressGatewayService, ecs:RegisterDaemonTaskDefinition, ecs:UpdateDaemon, ecs:UpdateExpressGatewayService, ecs:UpdateTaskSet, kms:CreateCustomKeyStore, lambda:CreateFunctionUrlConfig, lambda:CreateWebFunction, lambda:CreateWebFunctionEndpoint, lambda:CreateWebFunctionRevision, lambda:InvokeFunctionUrl, lambda:UpdateFunctionUrlConfig, lambda:UpdateWebFunctionEndpoint, sagemaker:CreateJob, sagemaker:CreateOptimizationJob, sagemaker:CreatePartnerApp
38 permissions management, incl. iam:AddUserToGroup: iam:AddUserToGroup, iam:AttachGroupPolicy, iam:AttachRolePolicy, iam:AttachUserPolicy, iam:ChangePassword, iam:CreateAccessKey, iam:CreateInstanceProfile, iam:CreateLoginProfile, iam:CreatePolicyVersion, iam:CreateRole, iam:CreateServiceSpecificCredential, iam:CreateUser, iam:DeleteAccessKey, iam:DeleteRole, iam:DetachUserPolicy, iam:PassRole, iam:PutGroupPolicy, iam:PutRolePolicy, iam:PutUserPermissionsBoundary, iam:PutUserPolicy, iam:ResetServiceSpecificCredential, iam:SetDefaultPolicyVersion, iam:UpdateAccessKey, iam:UpdateAccountPasswordPolicy, iam:UpdateAssumeRolePolicy, iam:UpdateLoginProfile, iam:UpdateUser, kms:CreateGrant, lambda:AddLayerVersionPermission, lambda:AddPermission, s3:DeleteBucketPolicy, s3:ObjectOwnerOverrideToBucketOwner, s3:PutAccountPublicAccessBlock, s3:PutBucketAcl, s3:PutBucketOwnershipControls, s3:PutBucketPolicy, secretsmanager:PutResourcePolicy, ssm:PutResourcePolicy
SageMakerStudioDomainExecutionRolePolicyv25updated

1 action added

57d2fde
1 never-before-seen action: datazone:ListDeployableEnvironmentBlueprints
AWSWAFFullAccessv18updated

1 action added

927f68a
1 never-before-seen action: payments:GetConnectedAccount
NetworkSecurityManagerServiceRolePolicyv2updated

58 actions added

6226417
7 never-before-seen actions: network-firewall:AssociateAvailabilityZones, network-firewall:CreateFirewallPolicyV2, network-firewall:DeleteFirewallPolicyV2, network-firewall:DescribeFirewallPolicyV2, network-firewall:DisassociateAvailabilityZones, network-firewall:ListFirewallPoliciesV2, network-firewall:UpdateFirewallPolicyV2
4 permissions management, incl. ram:AssociateResourceShare: ram:AssociateResourceShare, ram:CreateResourceShare, ram:DeleteResourceShare, ram:UpdateResourceShare
AIDevOpsOperatorAppAccessPolicyv12updated

6 actions added

611daf2
6 never-before-seen actions: aidevops:GetCatalogCapability, aidevops:GetChat, aidevops:ListCatalogCapabilities, aidevops:ListCatalogCapabilityFiles, aidevops:ListCatalogCapabilityTypes, aidevops:UpdateChat
17 changes that matter (8 shown), 11 routine changesView all changes

New AWS services spotted

Service prefixes that appeared in a managed policy for the first time, often before AWS announces the service

support-console AWS Support Console

/ 13 actions / in SupportUser

startups AWS Startups

/ 1 action / in ReadOnlyAccess

iotmanagedintegrations AWS IoT Managed Integrations

/ 1 action / in AWSResourceExplorerServiceRolePolicy

scn AWS Supply Chain

/ 3 actions / in AWSResourceExplorerServiceRolePolicy

wickr AWS Wickr

/ 2 actions / in AWSResourceExplorerServiceRolePolicy

supportauthz AWS Support Authorization

/ 6 actions / in AWSSupportServiceRolePolicy

All discoveries
Free - No account needed

Get notified when the policies you use change

Paste the AWS managed policies attached in your account, or track them all. Instant, daily or weekly, by email or in a Slack channel.

Subscribe

Continue exploring

Stats

Change velocity, seasonality and rankings

Endpoints

New regions, services and endpoint expansions

Security findings

Risky managed policies to use with caution