IAMTrail - IAM Policy Changes https://iamtrail.com/policies/ Track changes to AWS Managed IAM Policies. An unofficial archive by zoph.io. en-us Wed, 14 Oct 2026 19:05:52 GMT 60 ViewOnlyAccess: 14 actions added (v47) https://iamtrail.com/policies/ViewOnlyAccess/ https://github.com/zoph-io/IAMTrail/commit/d9196d08db416b8d28e756aab63c1a2e5aa61521 Wed, 14 Oct 2026 19:04:24 GMT IAM Policy bedrock-mantle Actions added: bedrock-mantle:CallWithBearerToken, bedrock-mantle:GetCustomizedModel, bedrock-mantle:GetFineTuningJob, bedrock-mantle:GetModel, bedrock-mantle:GetProject, bedrock-mantle:GetReservation, bedrock-mantle:ListCustomizedModelAssociations, bedrock-mantle:ListCustomizedModels and 6 more

]]> SageMakerStudioDataAppsAccessRolePolicy: 1 never-before-seen action https://iamtrail.com/policies/SageMakerStudioDataAppsAccessRolePolicy/ https://github.com/zoph-io/IAMTrail/commit/11a37e46d8b75e78ce363a9a2a2dfed5ee0275bc Tue, 13 Oct 2026 22:03:27 GMT IAM Policy datazone s3 1 never-before-seen action: datazone:ListSharedDataApps

Actions added: datazone:CreateSubscriptionRequest, datazone:GetListing, datazone:GetSubscription, datazone:ListGroupsForUser, datazone:ListProjects, datazone:ListSharedDataApps, datazone:ListSubscriptionGrants, datazone:ListSubscriptions and 3 more

]]> AIDevOpsConstellationAccessPolicy: 2 actions added (v2) https://iamtrail.com/policies/AIDevOpsConstellationAccessPolicy/ https://github.com/zoph-io/IAMTrail/commit/de23148d711a4b25d0a53caeec690cb1b0795205 Tue, 13 Oct 2026 21:02:52 GMT IAM Policy aidevops Actions added: aidevops:SendMessage, aidevops:UpdateBacklogTask

]]> AWSElasticLoadBalancingServiceRolePolicy: 1 action added (v15) https://iamtrail.com/policies/AWSElasticLoadBalancingServiceRolePolicy/ https://github.com/zoph-io/IAMTrail/commit/19971ebd971771576b3543691a3742ba4f6eb99e Tue, 13 Oct 2026 20:03:32 GMT IAM Policy ec2 Actions added: ec2:ValidateSecurityGroupQuotasForInterface

]]> AmazonSageMakerTrainingSessionAccess: 11 never-before-seen actions https://iamtrail.com/policies/AmazonSageMakerTrainingSessionAccess/ https://github.com/zoph-io/IAMTrail/commit/5c55618806e01e99fa23b8c2c56276fdda419830 Tue, 13 Oct 2026 01:03:10 GMT IAM Policy iam kms s3 sagemaker 11 never-before-seen actions: sagemaker:CreateTrainingSession, sagemaker:DeleteTrainingSession, sagemaker:DescribeTrainingSession, sagemaker:ExecuteSamplingOperation, sagemaker:ExecuteTrainingOperation, sagemaker:GetSamplingOperationResult, sagemaker:GetTrainingOperationResult, sagemaker:ListTrainingSessions and 3 more

Permissions management: iam:PassRole

Actions added: iam:PassRole, kms:Decrypt, kms:GenerateDataKey, s3:CreateBucket, s3:DeleteObject, s3:ListBucket, sagemaker:AddTags, sagemaker:CallWithBearerToken and 18 more

]]> New policy: AmazonSageMakerTrainingSessionFullAccess (21 actions) https://iamtrail.com/policies/AmazonSageMakerTrainingSessionFullAccess/ https://github.com/zoph-io/IAMTrail/commit/a9be5280991dc95255b07fef9d400dbf97d48886 Tue, 13 Oct 2026 01:03:10 GMT IAM Policy ec2 kms s3 sagemaker Permissions management: ec2:CreateNetworkInterfacePermission, ec2:DeleteNetworkInterfacePermission

Actions added: ec2:CreateNetworkInterface, ec2:CreateNetworkInterfacePermission, ec2:CreateTags, ec2:DeleteNetworkInterface, ec2:DeleteNetworkInterfacePermission, ec2:DescribeDhcpOptions, ec2:DescribeNetworkInterfaces, ec2:DescribeSecurityGroups and 13 more

]]> AWSElasticLoadBalancingClassicServiceRolePolicy: 1 action added (v3) https://iamtrail.com/policies/AWSElasticLoadBalancingClassicServiceRolePolicy/ https://github.com/zoph-io/IAMTrail/commit/5aad620e0722df08ab709e0e630033c45ccc343b Mon, 12 Oct 2026 20:02:51 GMT IAM Policy ec2 Actions added: ec2:ValidateSecurityGroupQuotasForInterface

]]> AWSSecurityAgentWebAppPolicy: 2 never-before-seen actions https://iamtrail.com/policies/AWSSecurityAgentWebAppPolicy/ https://github.com/zoph-io/IAMTrail/commit/1fb786850dc398103534d03625f991f3138f1808 Mon, 12 Oct 2026 17:04:18 GMT IAM Policy securityagent 2 never-before-seen actions: securityagent:BatchDisassociateFindingIssue, securityagent:BatchExportFindings

Actions added: securityagent:BatchDisassociateFindingIssue, securityagent:BatchExportFindings

]]> SageMakerStudioProjectProvisioningRolePolicy: 1 action added (v84) https://iamtrail.com/policies/SageMakerStudioProjectProvisioningRolePolicy/ https://github.com/zoph-io/IAMTrail/commit/a1c84177e347c4bc1da4918cd4ecae640a586d93 Mon, 12 Oct 2026 17:04:18 GMT IAM Policy glue Actions added: glue:UpdateDatabase

]]> AWSTransformServerMigrationAgentPolicy: scope changed, no action added or removed (v3) https://iamtrail.com/policies/AWSTransformServerMigrationAgentPolicy/ https://github.com/zoph-io/IAMTrail/commit/b37cf396bc24697d660761b61b4b191b8c9cda67 Sun, 11 Oct 2026 09:02:52 GMT IAM Policy Scope changed, no action added or removed in AWSTransformServerMigrationAgentPolicy (v3).

]]> ElasticLoadBalancingFullAccess: 1 never-before-seen action https://iamtrail.com/policies/ElasticLoadBalancingFullAccess/ https://github.com/zoph-io/IAMTrail/commit/b4ef0aed986cad61e0da3a959f6336a11c7b2365 Fri, 09 Oct 2026 20:03:20 GMT IAM Policy ec2 1 never-before-seen action: ec2:ValidateSecurityGroupQuotasForInterface

Actions added: ec2:ValidateSecurityGroupQuotasForInterface

]]> AWSDeadlineCloud-UserAccessJobs: 1 action added (v3) https://iamtrail.com/policies/AWSDeadlineCloud-UserAccessJobs/ https://github.com/zoph-io/IAMTrail/commit/d393ce2f816901e5519d6245ae7b097ed09bccc0 Fri, 09 Oct 2026 18:03:15 GMT IAM Policy deadline Actions added: deadline:ListMemberships

]]> AWSDeadlineCloud-UserAccessFarms: 1 never-before-seen action https://iamtrail.com/policies/AWSDeadlineCloud-UserAccessFarms/ https://github.com/zoph-io/IAMTrail/commit/958c204283f1b7c6abd677d1e16b83b9c295a3b3 Fri, 09 Oct 2026 17:03:23 GMT IAM Policy deadline 1 never-before-seen action: deadline:ListMemberships

Actions added: deadline:ListMemberships

]]> AWSDeadlineCloud-UserAccessFleets: 1 action added (v3) https://iamtrail.com/policies/AWSDeadlineCloud-UserAccessFleets/ https://github.com/zoph-io/IAMTrail/commit/514f3af91d98271ddc06378e64879a6e6b579cc6 Fri, 09 Oct 2026 17:03:23 GMT IAM Policy deadline Actions added: deadline:ListMemberships

]]> AWSDeadlineCloud-UserAccessQueues: 1 action added (v3) https://iamtrail.com/policies/AWSDeadlineCloud-UserAccessQueues/ https://github.com/zoph-io/IAMTrail/commit/00a3b8348f58b7b227c435e6670f5856b77e824d Fri, 09 Oct 2026 17:03:23 GMT IAM Policy deadline Actions added: deadline:ListMemberships

]]> CloudwatchApplicationInsightsServiceLinkedRolePolicy: 1 action added (v26) https://iamtrail.com/policies/CloudwatchApplicationInsightsServiceLinkedRolePolicy/ https://github.com/zoph-io/IAMTrail/commit/906e3d44d3479499a3cf3853c60aafe756f87a0f Fri, 09 Oct 2026 17:03:23 GMT IAM Policy cloudformation Actions added: cloudformation:TagResource

]]> AmazonRoute53FullAccess: 1 action added (v8). Permissions management: iam:CreateServiceLinkedRole https://iamtrail.com/policies/AmazonRoute53FullAccess/ https://github.com/zoph-io/IAMTrail/commit/848c2750350a72a26c472f1b88bfd218a296ad4b Thu, 08 Oct 2026 21:02:54 GMT IAM Policy iam Permissions management: iam:CreateServiceLinkedRole

Actions added: iam:CreateServiceLinkedRole

]]> AWSWellArchitectedAgentResourceScanningServiceRolePolicy: 2 actions added (v4) https://iamtrail.com/policies/AWSWellArchitectedAgentResourceScanningServiceRolePolicy/ https://github.com/zoph-io/IAMTrail/commit/16995033283d90d81c7244dd19d3577344b6652f Thu, 08 Oct 2026 20:02:45 GMT IAM Policy cloudformation resource-groups Actions added: cloudformation:ListStackResources, resource-groups:SearchResources

]]> SageMakerStudioAdminIAMDefaultExecutionPolicy: 21 actions added (v25). 6 permissions management, incl. s3:CreateAccessGrant https://iamtrail.com/policies/SageMakerStudioAdminIAMDefaultExecutionPolicy/ https://github.com/zoph-io/IAMTrail/commit/b652351630e6ce30ffed74cd687c118b29ee3812 Thu, 08 Oct 2026 19:02:52 GMT IAM Policy identitystore s3 sso Permissions management: s3:CreateAccessGrant, s3:CreateAccessGrantsLocation, s3:DeleteAccessGrant, s3:DeleteAccessGrantsLocation, s3:PutObjectAcl, s3:PutObjectVersionAcl

Actions added: identitystore:DescribeGroup, identitystore:DescribeUser, s3:CreateAccessGrant, s3:CreateAccessGrantsLocation, s3:DeleteAccessGrant, s3:DeleteAccessGrantsLocation, s3:DeleteObjectVersion, s3:GetAccessGrantsInstance and 13 more

]]> SageMakerStudioAdminIAMPermissiveExecutionPolicy: 4 actions added (v22) https://iamtrail.com/policies/SageMakerStudioAdminIAMPermissiveExecutionPolicy/ https://github.com/zoph-io/IAMTrail/commit/ac1c22f20f09656019092218dcc7a3bd2d979786 Thu, 08 Oct 2026 19:02:52 GMT IAM Policy identitystore sso Actions added: identitystore:DescribeGroup, identitystore:DescribeUser, sso:DescribeApplication, sso:DescribeInstance

]]> SageMakerStudioUserIAMPermissiveExecutionPolicy: 4 actions added (v25) https://iamtrail.com/policies/SageMakerStudioUserIAMPermissiveExecutionPolicy/ https://github.com/zoph-io/IAMTrail/commit/f58e1905983ada1dd710fd67c52e77a9766388a1 Thu, 08 Oct 2026 18:03:39 GMT IAM Policy identitystore sso Actions added: identitystore:DescribeGroup, identitystore:DescribeUser, sso:DescribeApplication, sso:DescribeInstance

]]> SageMakerStudioUserIAMDefaultExecutionPolicy: 22 actions added (v30). 6 permissions management, incl. s3:CreateAccessGrant https://iamtrail.com/policies/SageMakerStudioUserIAMDefaultExecutionPolicy/ https://github.com/zoph-io/IAMTrail/commit/92da41f967feca502c6383e2bcac898b33ba273c Thu, 08 Oct 2026 16:03:18 GMT IAM Policy identitystore s3 sso Permissions management: s3:CreateAccessGrant, s3:CreateAccessGrantsLocation, s3:DeleteAccessGrant, s3:DeleteAccessGrantsLocation, s3:PutObjectAcl, s3:PutObjectVersionAcl

Actions added: identitystore:DescribeGroup, identitystore:DescribeUser, s3:CreateAccessGrant, s3:CreateAccessGrantsLocation, s3:DeleteAccessGrant, s3:DeleteAccessGrantsLocation, s3:DeleteObject, s3:DeleteObjectVersion and 14 more

]]> AWSResourceExplorerServiceRolePolicy: 100 actions added (v57) https://iamtrail.com/policies/AWSResourceExplorerServiceRolePolicy/ https://github.com/zoph-io/IAMTrail/commit/c6588289306aa45a367af0729e472f776a03b53f Thu, 08 Oct 2026 15:02:49 GMT IAM Policy ec2 Actions added: ec2:DescribeAccountVpcEncryptionControl, ec2:DescribeAddressTransfers, ec2:DescribeAddressesAttribute, ec2:DescribeAggregateIdFormat, ec2:DescribeApplicationStatus, ec2:DescribeApplicationStatusCheckAssociations, ec2:DescribeApplicationStatusChecks, ec2:DescribeBundleTasks and 92 more

]]> ConsoleFullAccessFromVercel: 25 never-before-seen actions https://iamtrail.com/policies/ConsoleFullAccessFromVercel/ https://github.com/zoph-io/IAMTrail/commit/f52221c8f88555139083e346420147cd35169660 Thu, 08 Oct 2026 15:02:49 GMT IAM Policy iam s3 s3tables s3vectors 25 never-before-seen actions: s3:CreateBucketMetadataTableConfiguration, s3:DeleteBucketMetadataTableConfiguration, s3:PutAnalyticsConfiguration, s3:PutBucketAbac, s3:PutBucketRequestPayment, s3:PutIntelligentTieringConfiguration, s3:PutObjectAnnotation, s3:PutObjectLegalHold and 17 more

Permissions management: iam:PassRole, s3:DeleteBucketPolicy, s3:PutBucketAcl, s3:PutBucketOwnershipControls, s3:PutBucketPolicy, s3:PutBucketPublicAccessBlock, s3:PutObjectAcl, s3tables:DeleteTableBucketPolicy and 5 more

Actions added: iam:PassRole, s3:AbortMultipartUpload, s3:CreateBucketMetadataTableConfiguration, s3:DeleteBucketMetadataTableConfiguration, s3:DeleteBucketPolicy, s3:DeleteBucketWebsite, s3:DeleteObject, s3:DeleteObjectTagging and 124 more

]]> AccountManagementFromVercel: scope changed, no action added or removed (v5) https://iamtrail.com/policies/AccountManagementFromVercel/ https://github.com/zoph-io/IAMTrail/commit/409a50e7a44f27dbccbf959fb631e35f48520300 Thu, 08 Oct 2026 14:03:15 GMT IAM Policy Scope changed, no action added or removed in AccountManagementFromVercel (v5).

]]> ConsoleViewOnlyAccessFromVercel: 2 never-before-seen actions https://iamtrail.com/policies/ConsoleViewOnlyAccessFromVercel/ https://github.com/zoph-io/IAMTrail/commit/1e6a27c1c63a5e2fb04ae5dc69b3d59120f7446f Thu, 08 Oct 2026 14:03:15 GMT IAM Policy s3 s3tables s3vectors 2 never-before-seen actions: s3:GetObjectAnnotation, s3:ListObjectAnnotations

Actions added: s3:GetAnalyticsConfiguration, s3:GetBucketAbac, s3:GetBucketAcl, s3:GetBucketCORS, s3:GetBucketLocation, s3:GetBucketLogging, s3:GetBucketMetadataTableConfiguration, s3:GetBucketNotification and 60 more

]]> AWSServiceRoleForAWSTransformCustom: scope changed, no action added or removed (v3) https://iamtrail.com/policies/AWSServiceRoleForAWSTransformCustom/ https://github.com/zoph-io/IAMTrail/commit/46f5e401c37cd1a819e6cf0feac973dcc92a22e8 Tue, 06 Oct 2026 19:03:19 GMT IAM Policy Scope changed, no action added or removed in AWSServiceRoleForAWSTransformCustom (v3).

]]> AWSSecurityAgentWebAppPolicy: 7 actions added (v9). Permissions management: iam:PassRole https://iamtrail.com/policies/AWSSecurityAgentWebAppPolicy/ https://github.com/zoph-io/IAMTrail/commit/cee6617f14d6e8365cac096c4ba8e5cdc344bb11 Tue, 06 Oct 2026 18:04:06 GMT IAM Policy iam scheduler Permissions management: iam:PassRole

Actions added: iam:GetRole, iam:PassRole, scheduler:CreateSchedule, scheduler:CreateScheduleGroup, scheduler:DeleteSchedule, scheduler:GetSchedule, scheduler:UpdateSchedule

]]> AmazonConnectSynchronizationServiceRolePolicy: 5 never-before-seen actions https://iamtrail.com/policies/AmazonConnectSynchronizationServiceRolePolicy/ https://github.com/zoph-io/IAMTrail/commit/3652ac45b8d7593544b2cd20fe6d6fe23ef74e68 Tue, 06 Oct 2026 18:04:06 GMT IAM Policy connect 5 never-before-seen actions: connect:BatchGetAttachedFileMetadata, connect:CompleteAttachedFileUpload, connect:CreateAttachedFile, connect:DeleteAttachedFile, connect:GetAttachedFile

Actions added: connect:BatchGetAttachedFileMetadata, connect:CompleteAttachedFileUpload, connect:CreateAttachedFile, connect:DeleteAttachedFile, connect:GetAttachedFile

]]> AWSTransformLandingZoneAgentPolicy: scope changed, no action added or removed (v3) https://iamtrail.com/policies/AWSTransformLandingZoneAgentPolicy/ https://github.com/zoph-io/IAMTrail/commit/de9c5621909f7145755a31da0b2523b7e86b784f Tue, 06 Oct 2026 08:02:54 GMT IAM Policy Scope changed, no action added or removed in AWSTransformLandingZoneAgentPolicy (v3).

]]> AWSObservabilityAdminTelemetryEnablementServiceRolePolicy: 3 actions added (v16) https://iamtrail.com/policies/AWSObservabilityAdminTelemetryEnablementServiceRolePolicy/ https://github.com/zoph-io/IAMTrail/commit/0b24b3976c50c9ed71a6636bbc56a486f04835e4 Mon, 05 Oct 2026 23:03:18 GMT IAM Policy application-signals xray Actions added: application-signals:StartDiscovery, xray:GetTraceSegmentDestination, xray:UpdateTraceSegmentDestination

]]> New policy: AWSSecurityAgentContinuousPentestPolicy (6 actions) https://iamtrail.com/policies/AWSSecurityAgentContinuousPentestPolicy/ https://github.com/zoph-io/IAMTrail/commit/4240db326982cbfa01adaf33e90d5409d72205e3 Mon, 05 Oct 2026 17:03:29 GMT IAM Policy securityagent Actions added: securityagent:BatchGetFindings, securityagent:BatchGetPentestJobs, securityagent:ListFindings, securityagent:ListIntegratedResources, securityagent:StartPentestJob, securityagent:StopPentestJob

]]> AmazonConnectServiceLinkedRolePolicy: 1 never-before-seen action https://iamtrail.com/policies/AmazonConnectServiceLinkedRolePolicy/ https://github.com/zoph-io/IAMTrail/commit/a6cbfdd7fbc9e591fb7720fa8d37ee32a4f3727e Sat, 03 Oct 2026 00:02:45 GMT IAM Policy social-messaging 1 never-before-seen action: social-messaging:SendWhatsAppCallEvent

Actions added: social-messaging:SendWhatsAppCallEvent

]]> AmazonApplicationRecoveryControllerRegionSwitchPlanExecutionPolicy: 3 actions added (v5) https://iamtrail.com/policies/AmazonApplicationRecoveryControllerRegionSwitchPlanExecutionPolicy/ https://github.com/zoph-io/IAMTrail/commit/0bf95e13f30864c9efe1ebd7609bbfb7a95c01ab Fri, 02 Oct 2026 19:02:54 GMT IAM Policy servicequotas Actions added: servicequotas:GetRequestedServiceQuotaChange, servicequotas:GetServiceQuota, servicequotas:RequestServiceQuotaIncrease

]]> FinOpsAgentAgentPolicy: 1 never-before-seen action https://iamtrail.com/policies/FinOpsAgentAgentPolicy/ https://github.com/zoph-io/IAMTrail/commit/1a9da9770fc204f651c85d37f396e4c01af0981e Fri, 02 Oct 2026 19:02:54 GMT IAM Policy billing cost-optimization-hub rds 1 never-before-seen action: billing:ListBillingViewSegments

Actions added: billing:ListBillingViewSegments, cost-optimization-hub:GetPreferences, cost-optimization-hub:ListEnrollmentStatuses, rds:DescribeDBMajorEngineVersions

]]> AnthropicLimitedAccess: 2 never-before-seen actions https://iamtrail.com/policies/AnthropicLimitedAccess/ https://github.com/zoph-io/IAMTrail/commit/1a8a111fdf8e81891525f1b200030163084cb832 Fri, 02 Oct 2026 17:02:56 GMT IAM Policy aws-external-anthropic 2 never-before-seen actions: aws-external-anthropic:GetUserProfile, aws-external-anthropic:ListUserProfiles

Actions added: aws-external-anthropic:GetUserProfile, aws-external-anthropic:ListUserProfiles

]]> AnthropicReadOnlyAccess: 2 actions added (v4) https://iamtrail.com/policies/AnthropicReadOnlyAccess/ https://github.com/zoph-io/IAMTrail/commit/987c7ec07c431885cda7efbd3ad0c3a68316afc2 Fri, 02 Oct 2026 17:02:56 GMT IAM Policy aws-external-anthropic Actions added: aws-external-anthropic:GetUserProfile, aws-external-anthropic:ListUserProfiles

]]> AWSSecurityIncidentResponseReadOnlyAccess: 1 never-before-seen action https://iamtrail.com/policies/AWSSecurityIncidentResponseReadOnlyAccess/ https://github.com/zoph-io/IAMTrail/commit/350b2e6e3c4c54800159ff348eb72f951e1e0419 Thu, 01 Oct 2026 22:03:08 GMT IAM Policy security-ir 1 never-before-seen action: security-ir:GetFindingMetrics

Actions added: security-ir:GetFindingMetrics

]]> AWSManagedAccountManagementAccess: 4 actions added (v2) https://iamtrail.com/policies/AWSManagedAccountManagementAccess/ https://github.com/zoph-io/IAMTrail/commit/51701240a79fae05e36836368e88c17cdf69d610 Thu, 01 Oct 2026 20:03:19 GMT IAM Policy iam sts Actions added: iam:GetRole, iam:ListAttachedRolePolicies, iam:ListRolePolicies, sts:AssumeRole

]]> AWSResourceExplorerServiceRolePolicy: 742 actions added (v56) https://iamtrail.com/policies/AWSResourceExplorerServiceRolePolicy/ https://github.com/zoph-io/IAMTrail/commit/bdbe775d8854866c9b5c49b04dfc07e6e9e2510e Thu, 01 Oct 2026 19:02:57 GMT IAM Policy access-analyzer account account-access airflow amplify amplifyuibuilder app-integrations appconfig appflow application-autoscaling Actions added: access-analyzer:GetArchiveRule, access-analyzer:ListTagsForResource, account-access:GetEntitlement, account-access:ListEntitlements, account:GetAlternateContact, airflow:GetEnvironment, airflow:ListTagsForResource, amplify:GetApp and 734 more

]]> AWSLambdaInvokeWebFunctionEndpointAccess: 1 never-before-seen action https://iamtrail.com/policies/AWSLambdaInvokeWebFunctionEndpointAccess/ https://github.com/zoph-io/IAMTrail/commit/8a7a9ba6ebffc14d051ee36b86a4093601f0beb8 Thu, 01 Oct 2026 17:03:27 GMT IAM Policy lambda 1 never-before-seen action: lambda:InvokeWebFunctionEndpoint

Actions added: lambda:InvokeWebFunctionEndpoint

]]> AmazonEKSServiceRolePolicy: 3 never-before-seen actions https://iamtrail.com/policies/AmazonEKSServiceRolePolicy/ https://github.com/zoph-io/IAMTrail/commit/5f750fe6e3297acd9a0a4cc52c2632af77409409 Thu, 01 Oct 2026 17:03:27 GMT IAM Policy ec2 eks 3 never-before-seen actions: eks:ActivateCertificateAuthority, eks:CreateCertificateAuthority, eks:DeleteCertificateAuthority

Actions added: ec2:RebootInstances, eks:ActivateCertificateAuthority, eks:CreateCertificateAuthority, eks:DeleteCertificateAuthority

]]> AWSArtifactComplianceInquiriesFullAccess: 4 actions added (v3) https://iamtrail.com/policies/AWSArtifactComplianceInquiriesFullAccess/ https://github.com/zoph-io/IAMTrail/commit/3478c8903ab12be0f8111388d6ecc6d8801e654c Wed, 30 Sep 2026 23:03:42 GMT IAM Policy notifications notifications-contacts Actions added: notifications-contacts:GetEmailContact, notifications:ListChannels, notifications:ListEventRules, notifications:ListNotificationConfigurations

]]> AWSManagedSettingsAdminAccess: 5 actions added (v8) https://iamtrail.com/policies/AWSManagedSettingsAdminAccess/ https://github.com/zoph-io/IAMTrail/commit/a77d4327a8bd48f137cf607f81c36ea08eff8137 Wed, 30 Sep 2026 23:03:42 GMT IAM Policy account notifications Actions added: account:SendPhoneNumberVerification, account:VerifyPhoneNumber, notifications:AssociateManagedNotificationAccountContact, notifications:DisassociateManagedNotificationAccountContact, notifications:ListManagedNotificationChannelAssociations

]]> SecurityAudit: 20 never-before-seen actions https://iamtrail.com/policies/SecurityAudit/ https://github.com/zoph-io/IAMTrail/commit/cef7d52ab6f835b2311472c5f4dc04990eec4e6b Wed, 30 Sep 2026 21:03:28 GMT IAM Policy amplify apigateway appconfig appsync backup bedrock bedrock-agentcore cloudformation cloudtrail cloudwatch 20 never-before-seen actions: appsync:GetResourcePolicy, ec2:GetActiveVpnTunnelStatus, ec2:GetDeclarativePoliciesReportSummary, ec2:GetEnabledIpamPolicy, ec2:GetFlowLogsIntegrationTemplate, ec2:GetImageAncestry, ec2:GetIpamInternetRegistryAssociationAsns, ec2:GetIpamInternetRegistryAssociationCidrs and 12 more

Actions added: amplify:GetWebACLForResource, amplify:ListDomainAssociations, amplify:ListResourcesForWebACL, apigateway:GetPortal, apigateway:GetPortalProduct, apigateway:GetPortalProductSharingPolicy, apigateway:GetRoutingRule, apigateway:ListPortalProducts and 201 more

]]> ViewOnlyAccess: 322 actions added (v46) https://iamtrail.com/policies/ViewOnlyAccess/ https://github.com/zoph-io/IAMTrail/commit/18fd5d44b7d7ff2d6a80750db6be48751307f52e Wed, 30 Sep 2026 21:03:28 GMT IAM Policy amplify apigateway appconfig appsync backup bedrock bedrock-agentcore cloudformation cloudtrail codeartifact Actions added: amplify:GetWebACLForResource, amplify:ListDomainAssociations, amplify:ListResourcesForWebACL, apigateway:GetPortal, apigateway:GetPortalProduct, apigateway:GetPortalProductSharingPolicy, apigateway:GetRoutingRule, apigateway:ListPortalProducts and 314 more

]]> AWSAccountSettingsManagementRole: 2 never-before-seen actions https://iamtrail.com/policies/AWSAccountSettingsManagementRole/ https://github.com/zoph-io/IAMTrail/commit/65533ddd888098ee4faad0dd0ac8a7473f4a2ee0 Wed, 30 Sep 2026 20:02:47 GMT IAM Policy account 2 never-before-seen actions: account:SendPhoneNumberVerification, account:VerifyPhoneNumber

Actions added: account:SendPhoneNumberVerification, account:VerifyPhoneNumber

]]> AWSPCSServiceRolePolicy: scope changed, no action added or removed (v10) https://iamtrail.com/policies/AWSPCSServiceRolePolicy/ https://github.com/zoph-io/IAMTrail/commit/84f53ea276c6d81c6cb92e3d967f7b38d95d13d2 Wed, 30 Sep 2026 19:02:56 GMT IAM Policy Scope changed, no action added or removed in AWSPCSServiceRolePolicy (v10).

]]> WellArchitectedAgentResourceScanning: 2 actions added (v2) https://iamtrail.com/policies/WellArchitectedAgentResourceScanning/ https://github.com/zoph-io/IAMTrail/commit/af58fd8c20f50d1da5741541cb63eb6ff8a674ec Wed, 30 Sep 2026 19:02:56 GMT IAM Policy cloudformation resource-groups Actions added: cloudformation:ListStackResources, resource-groups:SearchResources

]]> New policy: EndUserMessagingServiceRolePolicy (1 action) https://iamtrail.com/policies/EndUserMessagingServiceRolePolicy/ https://github.com/zoph-io/IAMTrail/commit/920c587e6a96105353b6c431e0a5e932ba977e02 Tue, 29 Sep 2026 20:03:05 GMT IAM Policy cloudwatch Actions added: cloudwatch:PutMetricData

]]>