re:Invent / archive

re:Invent 2023

Nov 27 - Dec 1, 2023 in Las Vegas. What the archive caught from October 1 through December 31: new AWS services, never-before-seen actions, and the endpoint changes beside them.

New AWS services
11
Never-before-seen actions
461
Policy changes
226
Endpoint changes
78

What's New

Major posts from October 1 through December 31. A launch before the conference is pre-re:Invent. Regional rollouts are left out.

Pre-re:Invent

165 announcements
157 more announcements

During the conference

78 announcements
70 more announcements

After the conference

34 announcements
26 more announcements

4 new AWS services showed up in a managed policy pre-re:Invent. The conference opened Nov 27, 2023.

New AWS services

s3expressAmazon S3 ExpressDuring the conference
Nov 28, 2023 / 4 actions

First seen in AccessAnalyzerServiceRolePolicy

s3express:CreateBucket, s3express:CreateSession, s3express:getBucketPolicy, s3express:listAllMyDirectoryBuckets

eks-authAmazon EKS AuthDuring the conference
Nov 27, 2023 / 1 action

First seen in AmazonEKSWorkerNodePolicy

eks-auth:AssumeRoleForPodIdentity

partnercentral-account-managementAWS Partner central account managementPre-re:Invent
Nov 10, 2023 / 2 actions

First seen in PartnerCentralAccountManagementUserRoleAssociation

partnercentral-account-management:AssociatePartnerUser, partnercentral-account-management:DisassociatePartnerUser

mechanicalturkAmazon Mechanical TurkPre-re:Invent
Nov 2, 2023 / 1 action

First seen in SecurityAudit

mechanicalturk:ListHITs

codewhispererAmazon CodeWhispererPre-re:Invent
Oct 9, 2023 / 1 action

First seen in AWSGlueServiceNotebookRole

codewhisperer:GenerateRecommendations

Never-before-seen actions on existing services

connect Amazon Connect
Oct 3, 2023 / 58 never-before-seen actions

First of them in AWSConfigServiceRolePolicy

connect:batchGetFlowAssociation, connect:BatchPutContact, connect:CreateAgentStatus, connect:CreateHoursOfOperation, connect:CreatePredefinedAttribute, connect:CreatePrompt, connect:CreateQueue, connect:CreateQuickConnect and 50 more

wisdom Amazon Q in Connect
Oct 17, 2023 / 11 never-before-seen actions

First of them in AWSResourceExplorerServiceRolePolicy

wisdom:CreateQuickResponse, wisdom:DeleteQuickResponse, wisdom:GetImportJob, wisdom:GetQuickResponse, wisdom:ListAssistantAssociations, wisdom:ListImportJobs, wisdom:ListQuickResponses, wisdom:PutFeedback and 3 more

ivs Amazon Interactive Video Service
Dec 5, 2023 / 7 never-before-seen actions

First of them in IVSReadOnlyAccess

ivs:GetParticipant, ivs:GetStage, ivs:GetStageSession, ivs:ListParticipantEvents, ivs:ListParticipants, ivs:ListStages, ivs:ListStageSessions

profile Amazon Connect Customer Profiles
Oct 6, 2023 / 7 never-before-seen actions

First of them in AmazonConnectServiceLinkedRolePolicy

profile:CreateCalculatedAttributeDefinition, profile:DeleteCalculatedAttributeDefinition, profile:GetCalculatedAttributeDefinition, profile:GetCalculatedAttributeForProfile, profile:ListCalculatedAttributeDefinitions, profile:ListCalculatedAttributesForProfile, profile:UpdateCalculatedAttributeDefinition

datazone Amazon DataZone
Oct 3, 2023 / 5 never-before-seen actions

First of them in AmazonDataZoneFullUserAccess

datazone:GetIamPortalLoginUrl, datazone:getMetadataGenerationRun, datazone:listMetadataGenerationRuns, datazone:StartMetadataGenerationRun, datazone:StopMetadataGenerationRun

arc-zonal-shift Amazon Application Recovery Controller - Zonal Shift
Nov 29, 2023 / 3 never-before-seen actions

First of them in AWSZonalAutoshiftPracticeRunSLRPolicy

arc-zonal-shift:CancelZonalShift, arc-zonal-shift:StartZonalShift, arc-zonal-shift:UpdateZonalShift

cognito-identity Amazon Cognito Identity
Dec 1, 2023 / 3 never-before-seen actions

First of them in ReadOnlyAccess

cognito-identity:getIdentityPoolAnalytics, cognito-identity:getIdentityPoolDailyAnalytics, cognito-identity:getIdentityProviderDailyAnalytics

ds AWS Directory Service
Oct 27, 2023 / 3 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

ds:describeClientAuthenticationSettings, ds:describeLDAPSSettings, ds:describeSharedDirectories

kafka Amazon Managed Streaming for Apache Kafka
Dec 5, 2023 / 3 never-before-seen actions

First of them in AWSConfigServiceRolePolicy

kafka:describeVpcConnection, kafka:getClusterPolicy, kafka:listVpcConnections

logs Amazon CloudWatch Logs
Dec 1, 2023 / 3 never-before-seen actions

First of them in ReadOnlyAccess

logs:describeAccountPolicies, logs:listAnomalies, logs:listLogAnomalyDetectors

outposts AWS Outposts
Oct 27, 2023 / 3 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

outposts:getCatalogItem, outposts:getOrder, outposts:getSite

redshift-serverless Amazon Redshift Serverless
Dec 7, 2023 / 3 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

redshift-serverless:getSnapshot, redshift-serverless:getTableRestoreStatus, redshift-serverless:listTableRestoreStatus

route53resolver Amazon Route 53 Resolver
Oct 27, 2023 / 3 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

route53resolver:getOutpostResolver, route53resolver:getResolverQueryLogConfigPolicy, route53resolver:listOutpostResolvers

access-analyzer AWS IAM Access Analyzer
Nov 27, 2023 / 2 never-before-seen actions

First of them in IAMAccessAnalyzerReadOnlyAccess

access-analyzer:CheckAccessNotGranted, access-analyzer:CheckNoNewAccess

appconfig AWS AppConfig
Dec 5, 2023 / 2 never-before-seen actions

First of them in AWSConfigServiceRolePolicy

appconfig:getExtensionAssociation, appconfig:listExtensionAssociations

ebs Amazon Elastic Block Store
Nov 20, 2023 / 2 never-before-seen actions

First of them in AmazonInspector2AgentlessServiceRolePolicy

ebs:GetSnapshotBlock, ebs:listSnapshotBlocks

eks Amazon Elastic Kubernetes Service
Dec 7, 2023 / 2 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

eks:describeEksAnywhereSubscription, eks:listEksAnywhereSubscriptions

elasticache Amazon ElastiCache
Dec 7, 2023 / 2 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

elasticache:describeServerlessCaches, elasticache:describeServerlessCacheSnapshots

elasticbeanstalk AWS Elastic Beanstalk
Oct 27, 2023 / 2 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

elasticbeanstalk:describeAccountAttributes, elasticbeanstalk:listPlatformBranches

imagebuilder Amazon EC2 Image Builder
Oct 27, 2023 / 2 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

imagebuilder:DeleteImage, imagebuilder:listImageScanFindingAggregations

iot AWS IoT
Oct 27, 2023 / 2 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

iot:listPackages, iot:listPackageVersions

memorydb Amazon MemoryDB
Oct 17, 2023 / 2 never-before-seen actions

First of them in AWSResourceExplorerServiceRolePolicy

memorydb:DescribeAcls, memorydb:DescribeSubnetGroups

redshift Amazon Redshift
Nov 16, 2023 / 2 never-before-seen actions

First of them in AWSConfigServiceRolePolicy

redshift:describeEndpointAccess, redshift:describeEndpointAuthorization

rekognition Amazon Rekognition
Nov 8, 2023 / 2 never-before-seen actions

First of them in AmazonRekognitionReadOnlyAccess

rekognition:GetMediaAnalysisJob, rekognition:ListMediaAnalysisJobs

resource-groups AWS Resource Groups
Nov 10, 2023 / 2 never-before-seen actions

First of them in AWSServiceCatalogAppRegistryFullAccess

resource-groups:AssociateResource, resource-groups:DisassociateResource

s3 Amazon S3
Nov 25, 2023 / 2 never-before-seen actions

First of them in AWSIAMIdentityCenterAllowListForIdentityContext

s3:GetAccessGrantsInstanceForPrefix, s3:GetDataAccess

securityhub AWS Security Hub
Nov 27, 2023 / 2 never-before-seen actions

First of them in AWSSecurityHubServiceRolePolicy

securityhub:DisassociateFromAdministratorAccount, securityhub:UpdateSecurityControl

amplifyuibuilder AWS Amplify UI Builder
Oct 17, 2023 / 1 never-before-seen action

First of them in AWSResourceExplorerServiceRolePolicy

amplifyuibuilder:ListComponents

backup AWS Backup
Nov 11, 2023 / 1 never-before-seen action

First of them in AWSServiceRolePolicyForBackupRestoreTesting

backup:listProtectedResourcesByBackupVault

ce AWS Cost Explorer Service
Dec 1, 2023 / 1 never-before-seen action

First of them in ReadOnlyAccess

ce:GetApproximateUsageRecords

cloudwatch Amazon CloudWatch
Nov 26, 2023 / 1 never-before-seen action

First of them in CloudWatchLogsFullAccess

cloudwatch:GenerateQuery

dataexchange AWS Data Exchange
Oct 16, 2023 / 1 never-before-seen action

First of them in AWSEntityResolutionConsoleFullAccess

dataexchange:GetDataSet

dynamodb Amazon DynamoDB
Oct 27, 2023 / 1 never-before-seen action

First of them in AWSSupportServiceRolePolicy

dynamodb:listContributorInsights

ecs Amazon Elastic Container Service
Nov 26, 2023 / 1 never-before-seen action

First of them in AmazonGuardDutyServiceRolePolicy

ecs:PutAccountSettingDefault

elasticfilesystem Amazon Elastic File System
Nov 28, 2023 / 1 never-before-seen action

First of them in AmazonElasticFileSystemFullAccess

elasticfilesystem:UpdateFileSystemProtection

elasticmapreduce Amazon Elastic MapReduce
Nov 8, 2023 / 1 never-before-seen action

First of them in AWSIAMIdentityCenterAllowListForIdentityContext

elasticmapreduce:GetClusterSessionCredentials

finspace Amazon FinSpace
Nov 2, 2023 / 1 never-before-seen action

First of them in SecurityAudit

finspace:ListKxEnvironments

globalaccelerator AWS Global Accelerator
Nov 1, 2023 / 1 never-before-seen action

First of them in AWSIPAMServiceRolePolicy

globalaccelerator:listByoipCidrs

guardduty Amazon GuardDuty
Oct 3, 2023 / 1 never-before-seen action

First of them in AWSConfigServiceRolePolicy

guardduty:getMemberDetectors

health AWS Health APIs and Notifications
Dec 7, 2023 / 1 never-before-seen action

First of them in AWSSupportServiceRolePolicy

health:describeEntityAggregatesForOrganization

ram AWS Resource Access Manager (RAM)
Nov 1, 2023 / 1 never-before-seen action

First of them in AWSLakeFormationCrossAccountManager

ram:AssociateResourceSharePermission

rds Amazon RDS, Neptune & DocumentDB
Nov 27, 2023 / 1 never-before-seen action

First of them in AWSBackupServiceLinkedRolePolicyForBackup

rds:DeleteDBInstanceAutomatedBackup

resource-explorer-2 AWS Resource Explorer
Dec 7, 2023 / 1 never-before-seen action

First of them in AWSSupportServiceRolePolicy

resource-explorer-2:getAccountLevelServiceConfiguration

route53-recovery-control-config Amazon Route 53 Recovery Controls
Oct 18, 2023 / 1 never-before-seen action

First of them in AmazonRoute53RecoveryControlConfigReadOnlyAccess

route53-recovery-control-config:getResourcePolicy

route53domains Amazon Route 53 Domains
Oct 27, 2023 / 1 never-before-seen action

First of them in AWSSupportServiceRolePolicy

route53domains:listPrices

secretsmanager AWS Secrets Manager
Nov 16, 2023 / 1 never-before-seen action

First of them in AWSMarketplaceDeploymentServiceRolePolicy

secretsmanager:RemoveRegionsFromReplication

servicecatalog AWS Service Catalog
Nov 16, 2023 / 1 never-before-seen action

First of them in AWSConfigServiceRolePolicy

servicecatalog:DescribePortfolioShares

sms-voice Amazon Pinpoint SMS and Voice Service
Nov 28, 2023 / 1 never-before-seen action

First of them in AmazonConnectServiceLinkedRolePolicy

sms-voice:SendTextMessage

snowball AWS Snowball
Dec 7, 2023 / 1 never-before-seen action

First of them in AWSSupportServiceRolePolicy

snowball:listServiceVersions

ssm AWS Systems Manager
Oct 27, 2023 / 1 never-before-seen action

First of them in AWSSupportServiceRolePolicy

ssm:getOpsMetadata

vendor-insights AWS Marketplace Vendor Insights
Oct 19, 2023 / 1 never-before-seen action

First of them in AWSVendorInsightsVendorFullAccess

vendor-insights:UpdateDataSource

Permissions management

4 never-before-seen actions classified as permissions management.

datazone:GetIamPortalLoginUrl, fsx:DeleteResourcePolicy, fsx:GetResourcePolicy, fsx:PutResourcePolicy

New policies

Endpoint changes

From botocore, separate from the IAM prefixes above. All endpoint changes.

  • ca-west-1 Dec 21, 2023

77 service expansions.

GuardDuty announcements

All GuardDuty announcements