re:Invent / archive

re:Invent 2020

Nov 30 - Dec 18, 2020, virtual. What the archive caught from October 1 through December 31: new AWS services, never-before-seen actions, and the endpoint changes beside them.

New AWS services
11
Never-before-seen actions
333
Policy changes
191
Endpoint changes
0

What's New

Major posts from October 1 through December 31. A launch before the conference is pre-re:Invent. Regional rollouts are left out.

Pre-re:Invent

105 announcements
97 more announcements

During the conference

93 announcements
85 more announcements

After the conference

18 announcements
10 more announcements

6 new AWS services showed up in a managed policy pre-re:Invent. The conference opened Nov 30, 2020.

New AWS services

apsAmazon Managed Service for PrometheusDuring the conference
Dec 15, 2020 / 10 actions

First seen in AmazonPrometheusConsoleFullAccess

aps:CreateWorkspace, aps:DeleteWorkspace, aps:describeWorkspace, aps:GetLabels, aps:GetMetricMetadata, aps:GetSeries, aps:listWorkspaces, aps:QueryMetrics and 2 more

iotfleethubAWS IoT Fleet Hub for Device ManagementDuring the conference
Dec 15, 2020 / 3 actions

First seen in AWSIoTFleetHubFederationAccess

iotfleethub:DescribeApplication, iotfleethub:DescribeDashboard, iotfleethub:ListDashboards

iotwirelessAWS IoT WirelessDuring the conference
Dec 15, 2020 / 1 action

First seen in AWSIoTWirelessDataAccess

iotwireless:SendDataToWirelessDevice

devops-guruAmazon DevOps GuruDuring the conference
Dec 1, 2020 / 13 actions

First seen in AmazonDevOpsGuruReadOnlyAccess

devops-guru:DescribeAccountHealth, devops-guru:DescribeAccountOverview, devops-guru:DescribeAnomaly, devops-guru:DescribeInsight, devops-guru:DescribeResourceCollectionHealth, devops-guru:DescribeServiceIntegration, devops-guru:GetResourceCollection, devops-guru:ListAnomaliesForInsight and 5 more

ecr-publicAmazon Elastic Container Registry PublicDuring the conference
Dec 1, 2020 / 13 actions

First seen in AmazonElasticContainerRegistryPublicPowerUser

ecr-public:BatchCheckLayerAvailability, ecr-public:CompleteLayerUpload, ecr-public:describeImages, ecr-public:describeImageTags, ecr-public:describeRegistries, ecr-public:describeRepositories, ecr-public:GetAuthorizationToken, ecr-public:getRegistryCatalogData and 5 more

network-firewallAWS Network FirewallPre-re:Invent
Nov 17, 2020 / 21 actions

First seen in FMSServiceRolePolicy

network-firewall:AssociateFirewallPolicy, network-firewall:AssociateSubnets, network-firewall:CreateFirewall, network-firewall:CreateFirewallPolicy, network-firewall:DeleteFirewall, network-firewall:DeleteFirewallPolicy, network-firewall:DeleteResourcePolicy, network-firewall:describeFirewall and 13 more

applicationinsightsAmazon CloudWatch Application InsightsPre-re:Invent
Oct 15, 2020 / 6 actions

First seen in AWSServiceRoleForSMS

applicationinsights:CreateApplication, applicationinsights:CreateComponent, applicationinsights:DeleteApplication, applicationinsights:DeleteComponent, applicationinsights:UpdateApplication, applicationinsights:UpdateComponentConfiguration

braketAmazon BraketPre-re:Invent
Oct 13, 2020 / 4 actions

First seen in AWSSupportServiceRolePolicy

braket:getDevice, braket:getQuantumTask, braket:searchDevices, braket:searchQuantumTasks

networkmanagerAWS Network ManagerPre-re:Invent
Oct 13, 2020 / 7 actions

First seen in AWSSupportServiceRolePolicy

networkmanager:describeGlobalNetworks, networkmanager:getCustomerGatewayAssociations, networkmanager:getDevices, networkmanager:getLinkAssociations, networkmanager:getLinks, networkmanager:getSites, networkmanager:getTransitGatewayRegistrations

curAWS Cost and Usage ReportPre-re:Invent
Oct 5, 2020 / 4 actions

First seen in Billing

cur:DeleteReportDefinition, cur:DescribeReportDefinitions, cur:ModifyReportDefinition, cur:PutReportDefinition

timestreamAmazon TimestreamPre-re:Invent
Oct 1, 2020 / 10 actions

First seen in AWSQuickSightTimestreamPolicy

timestream:CancelQuery, timestream:describeDatabase, timestream:describeEndpoints, timestream:describeTable, timestream:listDatabases, timestream:ListMeasures, timestream:listTables, timestream:ListTagsForResource and 2 more

Never-before-seen actions on existing services

glue AWS Glue
Nov 20, 2020 / 31 never-before-seen actions

First of them in AWSGlueSchemaRegistryFullAccess

glue:checkSchemaVersionValidity, glue:CreateClassifier, glue:CreateCrawler, glue:CreateRegistry, glue:CreateSchema, glue:CreateTrigger, glue:CreateWorkflow, glue:DeleteClassifier and 23 more

appsync AWS AppSync
Oct 2, 2020 / 16 never-before-seen actions

First of them in AWSWAFConsoleFullAccess

appsync:CreateApiKey, appsync:CreateDataSource, appsync:CreateFunction, appsync:CreateGraphqlApi, appsync:DeleteApiKey, appsync:DeleteDataSource, appsync:DeleteFunction, appsync:DeleteGraphqlApi and 8 more

servicecatalog AWS Service Catalog
Nov 12, 2020 / 16 never-before-seen actions

First of them in AWSServiceCatalogAppRegistryFullAccess

servicecatalog:AssociateAttributeGroup, servicecatalog:AssociateResource, servicecatalog:CreateApplication, servicecatalog:CreateAttributeGroup, servicecatalog:DeleteApplication, servicecatalog:DeleteAttributeGroup, servicecatalog:DisassociateAttributeGroup, servicecatalog:DisassociateResource and 8 more

sagemaker Amazon SageMaker
Nov 27, 2020 / 14 never-before-seen actions

First of them in AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy

sagemaker:CreateCompilationJob, sagemaker:CreateEndpoint, sagemaker:CreateEndpointConfig, sagemaker:CreateModel, sagemaker:CreateWorkteam, sagemaker:DeleteEndpoint, sagemaker:DeleteEndpointConfig, sagemaker:DeleteModel and 6 more

cognito-idp Amazon Cognito User Pools
Nov 27, 2020 / 11 never-before-seen actions

First of them in AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy

cognito-idp:AdminConfirmSignUp, cognito-idp:AdminListGroupsForUser, cognito-idp:AdminListUserAuthEvents, cognito-idp:AdminResetUserPassword, cognito-idp:AdminUpdateUserAttributes, cognito-idp:DeleteGroup, cognito-idp:DeleteUser, cognito-idp:DeleteUserPool and 3 more

iot AWS IoT
Dec 8, 2020 / 11 never-before-seen actions

First of them in AmazonSageMakerEdgeDeviceFleetPolicy

iot:CreateFleetMetric, iot:DeleteFleetMetric, iot:DescribeFleetMetric, iot:GetBucketsAggregation, iot:GetCardinality, iot:GetPercentiles, iot:GetStatistics, iot:ListFleetMetrics and 3 more

honeycode Amazon Honeycode
Dec 1, 2020 / 10 never-before-seen actions

First of them in AmazonHoneycodeWorkbookFullAccess

honeycode:BatchCreateTableRows, honeycode:BatchDeleteTableRows, honeycode:BatchUpdateTableRows, honeycode:BatchUpsertTableRows, honeycode:DescribeTableDataImportJob, honeycode:ListTableColumns, honeycode:ListTableRows, honeycode:ListTables and 2 more

wafv2 AWS WAF V2
Oct 13, 2020 / 10 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

wafv2:describeManagedRuleGroup, wafv2:getIPSet, wafv2:getRateBasedStatementManagedKeys, wafv2:getRegexPatternSet, wafv2:getRuleGroup, wafv2:getSampledRequests, wafv2:listAvailableManagedRuleGroups, wafv2:listIPSets and 2 more

amplify AWS Amplify
Dec 1, 2020 / 9 never-before-seen actions

First of them in AdministratorAccess-Amplify

amplify:CreateApp, amplify:CreateBackendEnvironment, amplify:CreateBranch, amplify:DeleteApp, amplify:DeleteBackendEnvironment, amplify:DeleteBranch, amplify:getBackendEnvironment, amplify:listBackendEnvironments and 1 more

ec2 Amazon EC2
Oct 13, 2020 / 9 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

ec2:describeExportImageTasks, ec2:describeLocalGatewayRouteTables, ec2:describeLocalGatewayRouteTableVpcAssociations, ec2:describeLocalGateways, ec2:describeTransitGatewayConnectPeers, ec2:describeTransitGatewayConnects, ec2:getManagedPrefixListAssociations, ec2:ModifyLaunchTemplate and 1 more

ce AWS Cost Explorer Service
Oct 5, 2020 / 7 never-before-seen actions

First of them in Billing

ce:CreateNotificationSubscription, ce:CreateReport, ce:DeleteNotificationSubscription, ce:DeleteReport, ce:UpdateNotificationSubscription, ce:UpdatePreferences, ce:UpdateReport

license-manager AWS License Manager
Dec 3, 2020 / 7 never-before-seen actions

First of them in AWSMarketplaceLicenseManagementServiceRolePolicy

license-manager:AcceptGrant, license-manager:CreateGrant, license-manager:CreateGrantVersion, license-manager:DeleteGrant, license-manager:getGrant, license-manager:listDistributedGrants, license-manager:listReceivedGrants

codepipeline AWS CodePipeline
Oct 13, 2020 / 6 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

codepipeline:CreatePipeline, codepipeline:DeletePipeline, codepipeline:listWebhooks, codepipeline:StartPipelineExecution, codepipeline:TagResource, codepipeline:UpdatePipeline

lambda AWS Lambda
Dec 1, 2020 / 6 never-before-seen actions

First of them in AdministratorAccess-Amplify

lambda:AddLayerVersionPermission, lambda:DeleteLayerVersion, lambda:InvokeAsync, lambda:listTags, lambda:RemoveLayerVersionPermission, lambda:UntagResource

fsx Amazon FSx
Nov 9, 2020 / 5 never-before-seen actions

First of them in AWSBackupServiceRolePolicyForBackup

fsx:CreateBackup, fsx:CreateFileSystemFromBackup, fsx:DeleteBackup, fsx:DeleteFileSystem, fsx:UntagResource

cloudfront Amazon CloudFront
Dec 1, 2020 / 4 never-before-seen actions

First of them in AdministratorAccess-Amplify

cloudfront:CreateCloudFrontOriginAccessIdentity, cloudfront:DeleteCloudFrontOriginAccessIdentity, cloudfront:UntagResource, cloudfront:UpdateCloudFrontOriginAccessIdentity

cognito-identity Amazon Cognito Identity
Dec 1, 2020 / 4 never-before-seen actions

First of them in AdministratorAccess-Amplify

cognito-identity:CreateIdentityPool, cognito-identity:DeleteIdentityPool, cognito-identity:describeIdentity, cognito-identity:TagResource

dataexchange AWS Data Exchange
Nov 11, 2020 / 4 never-before-seen actions

First of them in AwsGlueDataBrewFullAccessPolicy

dataexchange:GetJob, dataexchange:ListDataSetRevisions, dataexchange:ListDataSets, dataexchange:ListRevisionAssets

events Amazon EventBridge
Nov 6, 2020 / 4 never-before-seen actions

First of them in AmazonEventBridgeReadOnlyAccess

events:describeArchive, events:describeReplay, events:listArchives, events:listReplays

iam AWS Identity and Access Management (IAM)
Oct 21, 2020 / 4 never-before-seen actions

First of them in AWSSSOServiceRolePolicy

iam:ListRoleTags, iam:TagRole, iam:UpdateAssumeRolePolicy, iam:UpdateRoleDescription

rds Amazon RDS, Neptune & DocumentDB
Oct 15, 2020 / 4 never-before-seen actions

First of them in AWSBudgetsActionsRolePolicyForResourceAdministrationWithSSM

rds:CrossRegionCommunication, rds:ModifyDBSnapshotAttribute, rds:StartDBInstance, rds:StopDBInstance

states AWS Step Functions
Nov 27, 2020 / 4 never-before-seen actions

First of them in AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy

states:CreateStateMachine, states:DeleteStateMachine, states:StopExecution, states:UpdateStateMachine

apigateway Amazon API Gateway Management
Nov 27, 2020 / 3 never-before-seen actions

First of them in AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy

apigateway:DELETE, apigateway:PATCH, apigateway:PUT

athena Amazon Athena
Nov 11, 2020 / 3 never-before-seen actions

First of them in AWSQuicksightAthenaAccess

athena:ListDatabases, athena:listDataCatalogs, athena:ListTableMetadata

signer AWS Signer
Oct 8, 2020 / 3 never-before-seen actions

First of them in ReadOnlyAccess

signer:getSigningPlatform, signer:listSigningProfiles, signer:ListTagsForResource

codecommit AWS CodeCommit
Nov 27, 2020 / 2 never-before-seen actions

First of them in AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy

codecommit:CreateCommit, codecommit:DeleteRepository

compute-optimizer AWS Compute Optimizer
Dec 23, 2020 / 2 never-before-seen actions

First of them in ComputeOptimizerReadOnlyAccess

compute-optimizer:getEBSVolumeRecommendations, compute-optimizer:GetLambdaFunctionRecommendations

ecs Amazon Elastic Container Service
Nov 23, 2020 / 2 never-before-seen actions

First of them in AWSBatchServiceRole

ecs:listAccountSettings, ecs:TagResource

firehose Amazon Kinesis Firehose
Nov 27, 2020 / 2 never-before-seen actions

First of them in AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy

firehose:StartDeliveryStreamEncryption, firehose:StopDeliveryStreamEncryption

organizations AWS Organizations
Dec 11, 2020 / 2 never-before-seen actions

First of them in AWSAuditManagerAdministratorAccess

organizations:DeregisterDelegatedAdministrator, organizations:RegisterDelegatedAdministrator

ssm AWS Systems Manager
Dec 7, 2020 / 2 never-before-seen actions

First of them in AWSSystemsManagerChangeManagementServicePolicy

ssm:CreateOpsMetadata, ssm:getCalendarState

translate Amazon Translate
Nov 23, 2020 / 2 never-before-seen actions

First of them in TranslateReadOnly

translate:GetParallelData, translate:ListParallelData

waf AWS WAF
Dec 8, 2020 / 2 never-before-seen actions

First of them in AWSAuditManagerServiceRolePolicy

waf:listActivatedRulesInRuleGroup, waf:ListTagsForResource

aws-portal AWS Billing Console
Oct 15, 2020 / 1 never-before-seen action

First of them in AWSBudgetsActionsWithAWSResourceControlAccess

aws-portal:ModifyBilling

backup AWS Backup
Nov 9, 2020 / 1 never-before-seen action

First of them in AWSBackupServiceRolePolicyForBackup

backup:CopyFromBackupVault

cloudwatch Amazon CloudWatch
Dec 1, 2020 / 1 never-before-seen action

First of them in AWSPanoramaGreengrassGroupRolePolicy

cloudwatch:PutDashboard

codebuild AWS CodeBuild
Nov 27, 2020 / 1 never-before-seen action

First of them in AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy

codebuild:UpdateProject

config AWS Config
Nov 11, 2020 / 1 never-before-seen action

First of them in AmazonSSMServiceRolePolicy

config:describeComplianceByResource

detective Amazon Detective
Dec 15, 2020 / 1 never-before-seen action

First of them in SecurityAudit

detective:GetGraphIngestState

dynamodb Amazon DynamoDB
Dec 1, 2020 / 1 never-before-seen action

First of them in AdministratorAccess-Amplify

dynamodb:UpdateContinuousBackups

ecr Amazon Elastic Container Registry
Dec 4, 2020 / 1 never-before-seen action

First of them in ECRReplicationServiceRolePolicy

ecr:ReplicateImage

greengrass AWS IoT Greengrass
Dec 1, 2020 / 1 never-before-seen action

First of them in AWSPanoramaServiceRolePolicy

greengrass:DeleteResourceDefinition

imagebuilder Amazon EC2 Image Builder
Dec 11, 2020 / 1 never-before-seen action

First of them in EC2InstanceProfileForImageBuilderECRContainerBuilds

imagebuilder:getContainerRecipe

kinesis Amazon Kinesis Data Streams
Dec 1, 2020 / 1 never-before-seen action

First of them in AdministratorAccess-Amplify

kinesis:AddTagsToStream

rekognition Amazon Rekognition
Oct 16, 2020 / 1 never-before-seen action

First of them in AmazonRekognitionReadOnlyAccess

rekognition:DetectProtectiveEquipment

resource-groups AWS Resource Groups
Oct 15, 2020 / 1 never-before-seen action

First of them in AWSServiceRoleForSMS

resource-groups:UpdateGroup

route53 Amazon Route 53
Dec 8, 2020 / 1 never-before-seen action

First of them in AWSAuditManagerServiceRolePolicy

route53:getQueryLoggingConfig

s3 Amazon S3
Nov 27, 2020 / 1 never-before-seen action

First of them in AmazonSageMakerAdmin-ServiceCatalogProductsServiceRolePolicy

s3:PutBucketPublicAccessBlock

secretsmanager AWS Secrets Manager
Dec 4, 2020 / 1 never-before-seen action

First of them in AmazonLaunchWizard_Fullaccess

secretsmanager:UntagResource

securityhub AWS Security Hub
Dec 8, 2020 / 1 never-before-seen action

First of them in AWSAuditManagerServiceRolePolicy

securityhub:DescribeStandards

servicequotas Service Quotas
Dec 21, 2020 / 1 never-before-seen action

First of them in ServiceQuotasReadOnlyAccess

servicequotas:ListTagsForResource

sso-directory AWS IAM Identity Center Directory
Dec 7, 2020 / 1 never-before-seen action

First of them in AWSSystemsManagerChangeManagementServicePolicy

sso-directory:IsMemberInGroup

waf-regional AWS WAF Regional
Dec 15, 2020 / 1 never-before-seen action

First of them in SecurityAudit

waf-regional:ListTagsForResource

Permissions management

10 never-before-seen actions classified as permissions management.

appsync:SetWebACL, cognito-identity:CreateIdentityPool, cognito-identity:DeleteIdentityPool, glue:DeleteResourcePolicy, iam:UpdateAssumeRolePolicy, iam:UpdateRoleDescription, lambda:AddLayerVersionPermission, lambda:RemoveLayerVersionPermission and 2 more

New policies

Continue exploring

Discoveries

Never-before-seen actions and new AWS services

Stats

Change velocity, seasonality and rankings

Endpoints

New regions, services and endpoint expansions