re:Invent / archive

re:Invent 2022

Nov 28 - Dec 2, 2022 in Las Vegas. What the archive caught from October 1 through December 31: new AWS services, never-before-seen actions, and the endpoint changes beside them.

New AWS services
18
Never-before-seen actions
314
Policy changes
203
Endpoint changes
89

What's New

Major posts from October 1 through December 31. A launch before the conference is pre-re:Invent. Regional rollouts are left out.

Pre-re:Invent

131 announcements
123 more announcements

During the conference

62 announcements
54 more announcements

After the conference

39 announcements
31 more announcements

12 new AWS services showed up in a managed policy pre-re:Invent. The conference opened Nov 28, 2022.

New AWS services

vpc-latticeAmazon VPC LatticeAfter the conference
Dec 6, 2022 / 5 actions

First seen in AutoScalingServiceRolePolicy

vpc-lattice:DeregisterTargets, vpc-lattice:getTargetGroup, vpc-lattice:listTargetGroups, vpc-lattice:listTargets, vpc-lattice:RegisterTargets

artifactAWS ArtifactDuring the conference
Dec 1, 2022 / 4 actions

First seen in AWSVendorInsightsAssessorFullAccess

artifact:GetReport, artifact:GetReportMetadata, artifact:GetTermForReport, artifact:ListReports

pipesAmazon EventBridge PipesDuring the conference
Dec 1, 2022 / 5 actions

First seen in CloudWatchEventsReadOnlyAccess

pipes:describePipe, pipes:listPipes, pipes:listTagsForResource, pipes:StartPipe, pipes:StopPipe

docdb-elasticAmazon DocumentDB Elastic ClustersDuring the conference
Nov 30, 2022 / 13 actions

First seen in AmazonDocDBConsoleFullAccess

docdb-elastic:CreateCluster, docdb-elastic:CreateClusterSnapshot, docdb-elastic:DeleteCluster, docdb-elastic:DeleteClusterSnapshot, docdb-elastic:getCluster, docdb-elastic:getClusterSnapshot, docdb-elastic:listClusters, docdb-elastic:listClusterSnapshots and 5 more

sagemaker-geospatialAmazon SageMaker Geospatial MLDuring the conference
Nov 30, 2022 / 1 action

First seen in AmazonSageMakerGeospatialExecutionRole

sagemaker-geospatial:GetEarthObservationJob

arc-zonal-shiftAmazon Application Recovery Controller - Zonal ShiftDuring the conference
Nov 29, 2022 / 3 actions

First seen in ElasticLoadBalancingFullAccess

arc-zonal-shift:getManagedResource, arc-zonal-shift:listManagedResources, arc-zonal-shift:listZonalShifts

oamAmazon CloudWatch Observability Access ManagerPre-re:Invent
Nov 27, 2022 / 8 actions

First seen in AWSXrayCrossAccountSharingConfiguration

oam:CreateLink, oam:DeleteLink, oam:getLink, oam:listAttachedLinks, oam:listLinks, oam:listSinks, oam:TagResource, oam:UpdateLink

schedulerAmazon EventBridge SchedulerPre-re:Invent
Nov 10, 2022 / 5 actions

First seen in AmazonEventBridgeReadOnlyAccess

scheduler:getSchedule, scheduler:getScheduleGroup, scheduler:listScheduleGroups, scheduler:listSchedules, scheduler:ListTagsForResource

ssm-sapAWS Systems Manager for SAPPre-re:Invent
Nov 10, 2022 / 7 actions

First seen in AWSBackupFullAccess

ssm-sap:BackupDatabase, ssm-sap:getDatabase, ssm-sap:getOperation, ssm-sap:listDatabases, ssm-sap:ListTagsForResource, ssm-sap:RestoreDatabase, ssm-sap:UpdateHanaBackupSettings

billingAWS BillingPre-re:Invent
Nov 2, 2022 / 1 action

First seen in ReadOnlyAccess

billing:ListBillingViews

identitystore-authAWS Identity Store AuthPre-re:Invent
Nov 2, 2022 / 2 actions

First seen in ReadOnlyAccess

identitystore-auth:BatchGetSession, identitystore-auth:ListSessions

a2cAWS App2ContainerPre-re:Invent
Oct 25, 2022 / 4 actions

First seen in AWSRefactoringToolkitFullAccess

a2c:GetContainerizationJobDetails, a2c:GetDeploymentJobDetails, a2c:StartContainerizationJob, a2c:StartDeploymentJob

resource-explorer-2AWS Resource ExplorerPre-re:Invent
Oct 25, 2022 / 5 actions

First seen in AWSResourceExplorerServiceRolePolicy

resource-explorer-2:BatchGetView, resource-explorer-2:getIndex, resource-explorer-2:listIndexes, resource-explorer-2:listViews, resource-explorer-2:search

panoramaAWS PanoramaPre-re:Invent
Oct 18, 2022 / 6 actions

First seen in AWSConfigServiceRolePolicy

panorama:DescribeApplicationInstance, panorama:DescribeApplicationInstanceDetails, panorama:DescribePackage, panorama:DescribePackageVersion, panorama:ListApplicationInstances, panorama:ListPackages

iotfleetwiseAWS IoT FleetWisePre-re:Invent
Oct 4, 2022 / 18 actions

First seen in AWSSupportServiceRolePolicy

iotfleetwise:getCampaign, iotfleetwise:getDecoderManifest, iotfleetwise:getFleet, iotfleetwise:getModelManifest, iotfleetwise:getSignalCatalog, iotfleetwise:getVehicle, iotfleetwise:getVehicleStatus, iotfleetwise:listCampaigns and 10 more

m2AWS Mainframe Modernization ServicePre-re:Invent
Oct 4, 2022 / 16 actions

First seen in AWSSupportServiceRolePolicy

m2:getApplication, m2:getApplicationVersion, m2:getBatchJobExecution, m2:getDataSetDetails, m2:getDataSetImportTask, m2:getDeployment, m2:getEnvironment, m2:listApplications and 8 more

private-networksAWS Private 5GPre-re:Invent
Oct 4, 2022 / 6 actions

First seen in AWSSupportServiceRolePolicy

private-networks:getDeviceIdentifier, private-networks:getNetwork, private-networks:getNetworkResource, private-networks:listDeviceIdentifiers, private-networks:listNetworkResources, private-networks:listNetworks

sagemaker-groundtruth-syntheticPre-re:Invent
Oct 4, 2022 / 4 actions

First seen in ReadOnlyAccess

sagemaker-groundtruth-synthetic:GetBatch, sagemaker-groundtruth-synthetic:GetProject, sagemaker-groundtruth-synthetic:ListBatchSummaries, sagemaker-groundtruth-synthetic:ListProjectSummaries

Never-before-seen actions on existing services

sqlworkbench AWS SQL Workbench
Oct 17, 2022 / 19 never-before-seen actions

First of them in AmazonRedshiftQueryEditorV2ReadWriteSharing

sqlworkbench:BatchGetNotebookCell, sqlworkbench:CreateNotebook, sqlworkbench:CreateNotebookCell, sqlworkbench:CreateNotebookFromVersion, sqlworkbench:CreateNotebookVersion, sqlworkbench:DeleteNotebook, sqlworkbench:DeleteNotebookCell, sqlworkbench:DeleteNotebookVersion and 11 more

sagemaker Amazon SageMaker
Nov 30, 2022 / 14 never-before-seen actions

First of them in AmazonSageMakerModelGovernanceUseAccess

sagemaker:CreateModelCard, sagemaker:CreateModelCardExportJob, sagemaker:DeleteModelCard, sagemaker:describeModelCard, sagemaker:describeModelCardExportJob, sagemaker:describeSpace, sagemaker:listModelCardExportJobs, sagemaker:listModelCards and 6 more

ec2 Amazon EC2
Oct 25, 2022 / 10 never-before-seen actions

First of them in AWSResourceExplorerServiceRolePolicy

ec2:describeCapacityReservationFleets, ec2:describeFpgaImages, ec2:describeInstanceEventWindows, ec2:describeNetworkInsightsAccessScopeAnalyses, ec2:describeNetworkInsightsAccessScopes, ec2:describeNetworkInsightsAnalyses, ec2:describeNetworkInsightsPaths, ec2:getSubnetCidrReservations and 2 more

redshift Amazon Redshift
Oct 13, 2022 / 9 never-before-seen actions

First of them in AWSBackupServiceRolePolicyForBackup

redshift:CreateClusterSnapshot, redshift:CreateTags, redshift:DeleteClusterSnapshot, redshift:describeClusterTracks, redshift:describeNodeConfigurationOptions, redshift:describeSnapshotSchedules, redshift:describeUsageLimits, redshift:RestoreFromClusterSnapshot and 1 more

forecast Amazon Forecast
Nov 2, 2022 / 8 never-before-seen actions

First of them in ReadOnlyAccess

forecast:DeleteResourceTree, forecast:DescribeWhatIfAnalysis, forecast:DescribeWhatIfForecast, forecast:DescribeWhatIfForecastExport, forecast:ListWhatIfAnalyses, forecast:ListWhatIfForecastExports, forecast:ListWhatIfForecasts, forecast:QueryWhatIfForecast

backup-gateway AWS Backup Gateway
Dec 15, 2022 / 7 never-before-seen actions

First of them in AWSBackupFullAccess

backup-gateway:getBandwidthRateLimitSchedule, backup-gateway:getHypervisor, backup-gateway:getHypervisorPropertyMappings, backup-gateway:getVirtualMachine, backup-gateway:PutBandwidthRateLimitSchedule, backup-gateway:PutHypervisorPropertyMappings, backup-gateway:StartVirtualMachinesMetadataSync

backup-storage AWS Backup Storage
Nov 10, 2022 / 7 never-before-seen actions

First of them in AWSBackupDataTransferAccess

backup-storage:GetChunk, backup-storage:GetObjectMetadata, backup-storage:ListChunks, backup-storage:ListObjects, backup-storage:NotifyObjectComplete, backup-storage:PutChunk, backup-storage:StartObject

evidently
Nov 2, 2022 / 6 never-before-seen actions

First of them in ReadOnlyAccess

evidently:GetExperimentResults, evidently:GetSegment, evidently:ListSegmentReferences, evidently:ListSegments, evidently:ListTagsForResource, evidently:TestSegmentPattern

cloudfront Amazon CloudFront
Oct 25, 2022 / 5 never-before-seen actions

First of them in AWSResourceExplorerServiceRolePolicy

cloudfront:listCachePolicies, cloudfront:listFunctions, cloudfront:listOriginRequestPolicies, cloudfront:listRealtimeLogConfigs, cloudfront:listResponseHeadersPolicies

cloudtrail AWS CloudTrail
Oct 25, 2022 / 5 never-before-seen actions

First of them in AWSResourceExplorerServiceRolePolicy

cloudtrail:CreateServiceLinkedChannel, cloudtrail:DeleteServiceLinkedChannel, cloudtrail:GetServiceLinkedChannel, cloudtrail:ListServiceLinkedChannels, cloudtrail:UpdateServiceLinkedChannel

mgn AWS Application Migration Service
Oct 4, 2022 / 5 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

mgn:describeLaunchConfigurationTemplates, mgn:listApplications, mgn:listSourceServerActions, mgn:listTemplateActions, mgn:listWaves

vendor-insights AWS Marketplace Vendor Insights
Dec 1, 2022 / 5 never-before-seen actions

First of them in AWSVendorInsightsVendorFullAccess

vendor-insights:ListTagsForResource, vendor-insights:TagResource, vendor-insights:UntagResource, vendor-insights:UpdateSecurityProfileSnapshotCreationConfiguration, vendor-insights:UpdateSecurityProfileSnapshotReleaseConfiguration

account AWS Account Management
Oct 21, 2022 / 4 never-before-seen actions

First of them in AWSOrganizationsFullAccess

account:DisableRegion, account:EnableRegion, account:GetContactInformation, account:PutContactInformation

aps Amazon Managed Service for Prometheus
Oct 24, 2022 / 4 never-before-seen actions

First of them in AmazonPrometheusConsoleFullAccess

aps:CreateLoggingConfiguration, aps:DeleteLoggingConfiguration, aps:DescribeLoggingConfiguration, aps:UpdateLoggingConfiguration

aws-marketplace AWS Marketplace
Nov 19, 2022 / 4 never-before-seen actions

First of them in AWSMarketplaceSellerFullAccess

aws-marketplace:GetSellerDashboard, aws-marketplace:ListTagsForResource, aws-marketplace:TagResource, aws-marketplace:UntagResource

connect Amazon Connect
Oct 18, 2022 / 4 never-before-seen actions

First of them in AWSConfigServiceRolePolicy

connect:describePhoneNumber, connect:ListPhoneNumbers, connect:listPhoneNumbersV2, connect:SearchAvailablePhoneNumbers

eks Amazon Elastic Kubernetes Service
Oct 4, 2022 / 4 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

eks:describeAddon, eks:describeIdentityProviderConfig, eks:listAddons, eks:listIdentityProviderConfigs

geo Amazon Location
Oct 18, 2022 / 4 never-before-seen actions

First of them in AWSConfigServiceRolePolicy

geo:listGeofenceCollections, geo:listPlaceIndexes, geo:listRouteCalculators, geo:ListTrackers

globalaccelerator AWS Global Accelerator
Nov 23, 2022 / 4 never-before-seen actions

First of them in AWSReachabilityAnalyzerServiceRolePolicy

globalaccelerator:listCustomRoutingAccelerators, globalaccelerator:listCustomRoutingEndpointGroups, globalaccelerator:listCustomRoutingListeners, globalaccelerator:listCustomRoutingPortMappings

iot AWS IoT
Oct 18, 2022 / 4 never-before-seen actions

First of them in AWSConfigServiceRolePolicy

iot:describeDomainConfiguration, iot:DescribeMitigationAction, iot:listDomainConfigurations, iot:ListMitigationActions

macie2 Amazon Macie
Oct 4, 2022 / 4 never-before-seen actions

First of them in ReadOnlyAccess

macie2:getAllowList, macie2:getRevealConfiguration, macie2:GetSensitiveDataOccurrencesAvailability, macie2:listAllowLists

networkmanager AWS Network Manager
Oct 4, 2022 / 4 never-before-seen actions

First of them in ReadOnlyAccess

networkmanager:getCoreNetworkChangeEvents, networkmanager:getTransitGatewayPeering, networkmanager:getTransitGatewayRouteTableAttachment, networkmanager:listPeerings

servicecatalog AWS Service Catalog
Nov 15, 2022 / 4 never-before-seen actions

First of them in AWSServiceCatalogSyncServiceRolePolicy

servicecatalog:DeleteProvisioningArtifact, servicecatalog:GetConfiguration, servicecatalog:PutConfiguration, servicecatalog:UpdateProvisioningArtifact

synthetics Amazon CloudWatch Synthetics
Oct 18, 2022 / 4 never-before-seen actions

First of them in AWSConfigServiceRolePolicy

synthetics:getGroup, synthetics:listAssociatedGroups, synthetics:listGroupResources, synthetics:listGroups

timestream Amazon Timestream
Nov 10, 2022 / 4 never-before-seen actions

First of them in AWSBackupServiceLinkedRolePolicyForBackup

timestream:GetAwsBackupStatus, timestream:GetAwsRestoreStatus, timestream:StartAwsBackupJob, timestream:StartAwsRestoreJob

xray AWS X-Ray
Nov 11, 2022 / 4 never-before-seen actions

First of them in AWSXrayReadOnlyAccess

xray:BatchGetTraceSummaryById, xray:GetDistinctTraceGraphs, xray:Link, xray:listResourcePolicies

ecs Amazon Elastic Container Service
Oct 25, 2022 / 3 never-before-seen actions

First of them in AWSRefactoringToolkitFullAccess

ecs:CreateService, ecs:ExecuteCommand, ecs:UntagResource

tiros AWS Tiros
Oct 4, 2022 / 3 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

tiros:ExtendQuery, tiros:getQueryExplanation, tiros:GetQueryExtensionAccounts

compute-optimizer AWS Compute Optimizer
Dec 22, 2022 / 2 never-before-seen actions

First of them in ComputeOptimizerReadOnlyAccess

compute-optimizer:getECSServiceRecommendationProjectedMetrics, compute-optimizer:getECSServiceRecommendations

logs Amazon CloudWatch Logs
Nov 27, 2022 / 2 never-before-seen actions

First of them in CloudWatchLogsCrossAccountSharingConfiguration

logs:Link, logs:TagResource

nimble Amazon Nimble Studio
Dec 20, 2022 / 2 never-before-seen actions

First of them in AmazonNimbleStudio-StudioAdmin

nimble:GetStreamingSessionBackup, nimble:ListStreamingSessionBackups

proton AWS Proton
Nov 9, 2022 / 2 never-before-seen actions

First of them in AWSProtonCodeBuildProvisioningBasicAccess

proton:GetResourcesSummary, proton:NotifyResourceDeploymentStatusChange

rds Amazon RDS, Neptune & DocumentDB
Oct 18, 2022 / 2 never-before-seen actions

First of them in AWSConfigServiceRolePolicy

rds:describeDBProxies, rds:describeDBProxyEndpoints

rum AWS CloudWatch RUM
Oct 28, 2022 / 2 never-before-seen actions

First of them in AmazonCloudWatchRUMReadOnlyAccess

rum:batchGetRumMetricDefinitions, rum:listRumMetricsDestinations

secretsmanager AWS Secrets Manager
Dec 13, 2022 / 2 never-before-seen actions

First of them in AmazonRDSPreviewServiceRolePolicy

secretsmanager:RotateSecret, secretsmanager:UpdateSecretVersionStage

servicediscovery AWS Cloud Map
Oct 14, 2022 / 2 never-before-seen actions

First of them in AmazonECSServiceRolePolicy

servicediscovery:CreateHttpNamespace, servicediscovery:TagResource

sso AWS IAM Identity Center
Nov 19, 2022 / 2 never-before-seen actions

First of them in SecurityAudit

sso:describeAccountAssignmentCreationStatus, sso:DisassociateProfile

workspaces Amazon WorkSpaces
Dec 15, 2022 / 2 never-before-seen actions

First of them in AmazonWorkSpacesAdmin

workspaces:CreateStandbyWorkspaces, workspaces:ModifyCertificateBasedAuthProperties

workspaces-web Amazon WorkSpaces Secure Browser
Nov 2, 2022 / 2 never-before-seen actions

First of them in AmazonWorkSpacesWebReadOnly

workspaces-web:GetUserAccessLoggingSettings, workspaces-web:ListUserAccessLoggingSettings

a4b Alexa for Business
Nov 19, 2022 / 1 never-before-seen action

First of them in SecurityAudit

a4b:ListSkills

amplifyuibuilder AWS Amplify UI Builder
Oct 18, 2022 / 1 never-before-seen action

First of them in AWSConfigServiceRolePolicy

amplifyuibuilder:ListThemes

cloudformation AWS CloudFormation & Cloud Control API
Oct 4, 2022 / 1 never-before-seen action

First of them in AWSSupportServiceRolePolicy

cloudformation:describeChangeSetHooks

cloudwatch Amazon CloudWatch
Nov 27, 2022 / 1 never-before-seen action

First of them in CloudWatchCrossAccountSharingConfiguration

cloudwatch:Link

cognito-identity Amazon Cognito Identity
Oct 6, 2022 / 1 never-before-seen action

First of them in SecurityAudit

cognito-identity:ListTagsForResource

config AWS Config
Dec 20, 2022 / 1 never-before-seen action

First of them in AWSManagedServices_DetectiveControlsConfig_ServiceRolePolicy

config:PutAggregationAuthorization

discovery AWS Application Discovery Service
Nov 9, 2022 / 1 never-before-seen action

First of them in AWSMigrationHubStrategyConsoleFullAccess

discovery:DescribeTags

ecr Amazon Elastic Container Registry
Oct 25, 2022 / 1 never-before-seen action

First of them in AWSRefactoringToolkitFullAccess

ecr:UntagResource

gamelift Amazon GameLift Servers
Oct 18, 2022 / 1 never-before-seen action

First of them in AWSConfigServiceRolePolicy

gamelift:DescribeVpcPeeringConnections

iotsitewise AWS IoT SiteWise
Oct 18, 2022 / 1 never-before-seen action

First of them in AWSConfigServiceRolePolicy

iotsitewise:ListTagsForResource

outposts AWS Outposts
Oct 4, 2022 / 1 never-before-seen action

First of them in AWSSupportServiceRolePolicy

outposts:listAssets

profile Amazon Connect Customer Profiles
Nov 7, 2022 / 1 never-before-seen action

First of them in AmazonConnectServiceLinkedRolePolicy

profile:GetProfileObjectTypeTemplate

qldb Amazon QLDB
Nov 4, 2022 / 1 never-before-seen action

First of them in AmazonQLDBConsoleFullAccess

qldb:PartiQLRedact

quicksight Amazon QuickSight
Oct 18, 2022 / 1 never-before-seen action

First of them in AWSConfigServiceRolePolicy

quicksight:listDataSources

schemas Amazon EventBridge Schemas
Nov 10, 2022 / 1 never-before-seen action

First of them in AmazonEventBridgeReadOnlyAccess

schemas:ExportSchema

ses Amazon SES & Pinpoint Email
Nov 2, 2022 / 1 never-before-seen action

First of them in ReadOnlyAccess

ses:batchGetMetricData

wafv2 AWS WAF V2
Oct 21, 2022 / 1 never-before-seen action

First of them in AWSFMAdminFullAccess

wafv2:ListAvailableManagedRuleGroupVersions

Permissions management

1 never-before-seen action classified as permissions management.

sso:DisassociateProfile

New policies

Endpoint changes

From botocore, separate from the IAM prefixes above. All endpoint changes.

  • eu-central-2 Nov 11, 2022
  • eu-south-2 Nov 17, 2022
  • ap-south-2 Nov 23, 2022
  • sa-east-1 Dec 31, 2022

85 service expansions.

GuardDuty announcements

All GuardDuty announcements

Continue exploring

Discoveries

Never-before-seen actions and new AWS services

Stats

Change velocity, seasonality and rankings

Endpoints

New regions, services and endpoint expansions