IAMTrail

Unofficial

AWS silently updates Managed IAM policies all the time.
We archive every published version.

Full version history and diffs for 1665 AWS Managed IAM Policies, archived since 2019. | A service by zoph.io

re:Invent 2026

0 new AWS services and 68 never-before-seen actions since October 1. Conference Nov 30 - Dec 4, 2026 in Las Vegas. 17 pre-re:Invent announcements on What's New.

This week: changes that matter

New AWS services, never-before-seen actions, permissions management, new and removed policies. Last 7 days as of Oct 14, 2026.

SageMakerStudioUserIAMDefaultExecutionPolicyv31updated

13 actions added

c1ae3a5
11 never-before-seen actions: datazone:CreateDataApp, datazone:DeleteAgentApprovalPolicy, datazone:DeleteConversation, datazone:DeleteDataApp, datazone:DeregisterAgentArtifact, datazone:InvokeAgent, datazone:PutAgentApprovalPolicy, datazone:RegisterAgentArtifact, datazone:StopAgent, datazone:UpdateConversation, datazone:UpdateDataApp
SageMakerStudioDataAppsAccessRolePolicyv1new policy

11 actions added

11a37e4
1 never-before-seen action: datazone:ListSharedDataApps
AmazonSageMakerTrainingSessionAccessv1new policy

26 actions added

5c55618
11 never-before-seen actions: sagemaker:CreateTrainingSession, sagemaker:DeleteTrainingSession, sagemaker:DescribeTrainingSession, sagemaker:ExecuteSamplingOperation, sagemaker:ExecuteTrainingOperation, sagemaker:GetSamplingOperationResult, sagemaker:GetTrainingOperationResult, sagemaker:ListTrainingSessions, sagemaker:SampleTrainingSession, sagemaker:SampleTrainingSessionWithResponseStream, sagemaker:StopTrainingSession
Permissions management: iam:PassRole: iam:PassRole
AWSSecurityAgentWebAppPolicyv10updated

2 actions added

1fb7868
2 never-before-seen actions: securityagent:BatchDisassociateFindingIssue, securityagent:BatchExportFindings
ElasticLoadBalancingFullAccessv10updated

1 action added

b4ef0ae
1 never-before-seen action: ec2:ValidateSecurityGroupQuotasForInterface
AWSDeadlineCloud-UserAccessFarmsv8updated

1 action added

958c204
1 never-before-seen action: deadline:ListMemberships
ConsoleFullAccessFromVercelv5updated

132 actions added

f52221c
25 never-before-seen actions: s3:CreateBucketMetadataTableConfiguration, s3:DeleteBucketMetadataTableConfiguration, s3:PutAnalyticsConfiguration, s3:PutBucketAbac, s3:PutBucketRequestPayment, s3:PutIntelligentTieringConfiguration, s3:PutObjectAnnotation, s3:PutObjectLegalHold, s3tables:DeleteTableBucketPolicy, s3tables:DeleteTableBucketReplication, s3tables:DeleteTablePolicy, s3tables:DeleteTableReplication, s3tables:PutTableBucketMaintenanceConfiguration, s3tables:PutTableBucketReplication, s3tables:PutTableBucketStorageClass, s3tables:PutTableMaintenanceConfiguration, s3tables:PutTablePolicy, s3tables:PutTableRecordExpirationConfiguration, s3tables:PutTableReplication, s3tables:TagResource, s3tables:UntagResource, s3vectors:DeleteVectorBucketPolicy, s3vectors:PutVectorBucketPolicy, s3vectors:TagResource, s3vectors:UntagResource
13 permissions management, incl. iam:PassRole: iam:PassRole, s3:DeleteBucketPolicy, s3:PutBucketAcl, s3:PutBucketOwnershipControls, s3:PutBucketPolicy, s3:PutBucketPublicAccessBlock, s3:PutObjectAcl, s3tables:DeleteTableBucketPolicy, s3tables:DeleteTablePolicy, s3tables:PutTableBucketPolicy, s3tables:PutTablePolicy, s3vectors:DeleteVectorBucketPolicy, s3vectors:PutVectorBucketPolicy
ConsoleViewOnlyAccessFromVercelv6updated

68 actions added

1e6a27c
2 never-before-seen actions: s3:GetObjectAnnotation, s3:ListObjectAnnotations
13 changes that matter (8 shown), 19 routine changesView all changes

New AWS services spotted

Service prefixes that appeared in a managed policy for the first time, often before AWS announces the service

workspaces-instances AWS WorkSpaces Managed Instances

/ 3 actions / in AWSWellArchitectedAgentResourceScanningServiceRolePolicy

supportapp AWS Support App in Slack

/ 3 actions / in AWSResourceExplorerServiceRolePolicy

assurance

/ 22 actions / in AssuranceServiceRolePolicy

agent-registry AWS Agent Registry

/ 12 actions / in AgentRegistryReadOnlyAccess

bedrock-websearch Amazon Bedrock Web Search

/ 3 actions / in AmazonBedrockExternalWebSearchFullAccess

builderid

/ 4 actions / in AWSManagedSettingsAdminAccess

All discoveries
Free - No account needed

Get notified when the policies you use change

Paste the AWS managed policies attached in your account, or track them all. Instant, daily or weekly, by email or in a Slack channel.

Subscribe

Continue exploring

Stats

Change velocity, seasonality and rankings

Endpoints

New regions, services and endpoint expansions

Security findings

Risky managed policies to use with caution