re:Invent / archive

re:Invent 2025

Dec 1-5, 2025 in Las Vegas. What the archive caught from October 1 through December 31: new AWS services, never-before-seen actions, and the endpoint changes beside them.

New AWS services
13
Never-before-seen actions
456
Policy changes
261
Endpoint changes
32

What's New

Major posts from October 1 through December 31. A launch before the conference is pre-re:Invent. Regional rollouts are left out.

Pre-re:Invent

133 announcements
125 more announcements

During the conference

30 announcements
22 more announcements

After the conference

24 announcements
16 more announcements

5 new AWS services showed up in a managed policy pre-re:Invent. The conference opened Dec 1, 2025.

New AWS services

bcm-recommended-actionsAWS Billing And Cost Management Recommended ActionsAfter the conference
Dec 11, 2025 / 1 action

First seen in AccountManagementFromVercel

bcm-recommended-actions:ListRecommendedActions

rds-dbAmazon RDS IAM AuthenticationAfter the conference
Dec 11, 2025 / 1 action

First seen in ConsoleFullAccessFromVercel

rds-db:connect

geo-mapsAmazon Location Service MapsAfter the conference
Dec 9, 2025 / 2 actions

First seen in AWSSupportServiceRolePolicy

geo-maps:getStaticMap, geo-maps:getTile

geo-placesAmazon Location Service PlacesAfter the conference
Dec 9, 2025 / 7 actions

First seen in AWSSupportServiceRolePolicy

geo-places:autocomplete, geo-places:geocode, geo-places:getPlace, geo-places:reverseGeocode, geo-places:searchNearby, geo-places:searchText, geo-places:suggest

geo-routesAmazon Location Service RoutesAfter the conference
Dec 9, 2025 / 5 actions

First seen in AWSSupportServiceRolePolicy

geo-routes:calculateIsolines, geo-routes:calculateRouteMatrix, geo-routes:calculateRoutes, geo-routes:optimizeWaypoints, geo-routes:snapToRoads

transform-customAWS Transform customDuring the conference
Dec 5, 2025 / 18 actions

First seen in AWSTransformCustomExecuteTransformations

transform-custom:CompleteTransformationPackageUpload, transform-custom:ConverseStream, transform-custom:CreateTransformationPackageUrl, transform-custom:DeleteKnowledgeItem, transform-custom:DeleteTransformationPackage, transform-custom:ExecuteTransformation, transform-custom:GetCampaign, transform-custom:GetKnowledgeItem and 10 more

bedrock-mantleAmazon Bedrock Powered by AWS MantleDuring the conference
Dec 4, 2025 / 2 actions

First seen in AmazonBedrockMantleInferenceAccess

bedrock-mantle:CallWithBearerToken, bedrock-mantle:CreateInference

securityagentAWS Security AgentDuring the conference
Dec 2, 2025 / 32 actions

First seen in SecurityAgentWebAppAPIPolicy

securityagent:AddArtifact, securityagent:BatchDeletePentests, securityagent:BatchGetAgentInstances, securityagent:BatchGetArtifactMetadata, securityagent:BatchGetFindings, securityagent:BatchGetPentestJobs, securityagent:BatchGetPentests, securityagent:BatchGetSecurityTestContentMetadata and 24 more

eks-mcpAmazon EKS MCP ServerPre-re:Invent
Nov 20, 2025 / 2 actions

First seen in AmazonEKSMCPReadOnlyAccess

eks-mcp:CallReadOnlyTool, eks-mcp:InvokeMcp

pricingplanmanagerAWS PricingPlanManager ServicePre-re:Invent
Nov 19, 2025 / 8 actions

First seen in AWSWAFConsoleFullAccess

pricingplanmanager:AssociateResourcesToSubscription, pricingplanmanager:CancelSubscription, pricingplanmanager:CancelSubscriptionChange, pricingplanmanager:CreateSubscription, pricingplanmanager:DisassociateResourcesFromSubscription, pricingplanmanager:GetSubscription, pricingplanmanager:ListSubscriptions, pricingplanmanager:UpdateSubscription

airflow-serverlessAWS MWAA ServerlessPre-re:Invent
Nov 17, 2025 / 7 actions

First seen in SageMakerStudioAdminIAMDefaultExecutionPolicy

airflow-serverless:CreateWorkflow, airflow-serverless:DeleteWorkflow, airflow-serverless:StartWorkflowRun, airflow-serverless:StopWorkflowRun, airflow-serverless:TagResource, airflow-serverless:UntagResource, airflow-serverless:UpdateWorkflow

sagemaker-unified-studio-mcpAmazon SageMaker Unified Studio MCPPre-re:Invent
Nov 17, 2025 / 3 actions

First seen in SageMakerStudioProjectUserRolePolicy

sagemaker-unified-studio-mcp:CallPrivilegedTool, sagemaker-unified-studio-mcp:CallReadOnlyTool, sagemaker-unified-studio-mcp:InvokeMcp

action-recommendationsAWS Action RecommendationsPre-re:Invent
Oct 23, 2025 / 1 action

First seen in ReadOnlyAccess

action-recommendations:ListRecommendedActions

Never-before-seen actions on existing services

partnercentral AWS Partner Central
Nov 19, 2025 / 38 never-before-seen actions

First of them in AWSPartnerCentralChannelHandshakeApprovalManagement

partnercentral:AcceptChannelHandshake, partnercentral:CancelChannelHandshake, partnercentral:CancelProfileUpdateTask, partnercentral:CreateChannelHandshake, partnercentral:CreateCollaborationChannelMembers, partnercentral:CreateCollaborationChannelRequest, partnercentral:CreateEngagementContext, partnercentral:CreateProgramManagementAccount and 30 more

iotsitewise AWS IoT SiteWise
Oct 7, 2025 / 31 never-before-seen actions

First of them in AWS_ConfigRole

iotsitewise:BatchGetAssetPropertyAggregates, iotsitewise:BatchGetAssetPropertyValue, iotsitewise:BatchGetAssetPropertyValueHistory, iotsitewise:DescribeAction, iotsitewise:DescribeAssetCompositeModel, iotsitewise:DescribeAssetModelCompositeModel, iotsitewise:DescribeAssetModelInterfaceRelationship, iotsitewise:DescribeBulkImportJob and 23 more

observabilityadmin Amazon CloudWatch Observability Admin Service
Oct 7, 2025 / 31 never-before-seen actions

First of them in CloudWatchReadOnlyAccess

observabilityadmin:CreateCentralizationRuleForOrganization, observabilityadmin:CreateS3TableIntegration, observabilityadmin:CreateTelemetryPipeline, observabilityadmin:CreateTelemetryRule, observabilityadmin:CreateTelemetryRuleForOrganization, observabilityadmin:DeleteCentralizationRuleForOrganization, observabilityadmin:DeleteS3TableIntegration, observabilityadmin:DeleteTelemetryPipeline and 23 more

datazone Amazon DataZone
Nov 17, 2025 / 19 never-before-seen actions

First of them in SageMakerStudioUserIAMDefaultExecutionPolicy

datazone:BatchGetAttributesMetadata, datazone:BatchGetCell, datazone:BatchGetCellRun, datazone:BatchPutAttributesMetadata, datazone:CreateCell, datazone:CreateCellRun, datazone:CreateNotebook, datazone:DeleteCell and 11 more

omics AWS HealthOmics
Dec 9, 2025 / 13 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

omics:getAnnotationStoreVersion, omics:getReadSetActivationJob, omics:getReadSetExportJob, omics:getRunCache, omics:getRunTask, omics:getShare, omics:getWorkflowVersion, omics:listAnnotationStoreVersions and 5 more

geo Amazon Location
Nov 13, 2025 / 11 never-before-seen actions

First of them in AWSConfigServiceRolePolicy

geo:calculateRoute, geo:calculateRouteMatrix, geo:DescribeKey, geo:getMapGlyphs, geo:getMapSprites, geo:getMapStyleDescriptor, geo:getMapTile, geo:ListKeys and 3 more

profile Amazon Connect Customer Profiles
Nov 7, 2025 / 11 never-before-seen actions

First of them in AmazonConnectServiceLinkedRolePolicy

profile:CreateRecommender, profile:DeleteRecommender, profile:GetProfileInsights, profile:GetProfileRecommendations, profile:GetRecommender, profile:ListObjectTypeAttributeValues, profile:ListRecommenderRecipes, profile:ListRecommenders and 3 more

app-integrations Amazon AppIntegrations
Nov 7, 2025 / 10 never-before-seen actions

First of them in AmazonConnectServiceLinkedRolePolicy

app-integrations:CreateDataIntegrationSchedule, app-integrations:GetDataIntegration, app-integrations:GetDataIntegrationExecution, app-integrations:GetDataIntegrationSchedule, app-integrations:ListDataIntegrationAssociations, app-integrations:ListDataIntegrationExecutions, app-integrations:ListDataIntegrations, app-integrations:ListDataIntegrationSchedules and 2 more

memorydb Amazon MemoryDB
Oct 1, 2025 / 10 never-before-seen actions

First of them in ReadOnlyAccess

memorydb:DescribeEngineVersions, memorydb:DescribeEvents, memorydb:DescribeMultiRegionClusters, memorydb:DescribeMultiRegionParameterGroups, memorydb:DescribeMultiRegionParameters, memorydb:DescribeReservedNodes, memorydb:describeReservedNodesOfferings, memorydb:DescribeServiceUpdates and 2 more

s3tables Amazon S3 Tables
Dec 2, 2025 / 10 never-before-seen actions

First of them in CloudWatchFullAccessV2

s3tables:getTableBucketReplication, s3tables:getTableBucketStorageClass, s3tables:getTableEncryption, s3tables:getTableRecordExpirationConfiguration, s3tables:getTableRecordExpirationJobStatus, s3tables:getTableReplication, s3tables:getTableReplicationStatus, s3tables:getTableStorageClass and 2 more

invoicing AWS Invoicing Service
Oct 3, 2025 / 9 never-before-seen actions

First of them in AWSBillingReadOnlyAccess

invoicing:CreateProcurementPortalPreference, invoicing:DeleteProcurementPortalPreference, invoicing:GetInvoiceCorrection, invoicing:GetProcurementPortalPreference, invoicing:ListInvoiceCorrections, invoicing:ListProcurementPortalPreferences, invoicing:PutProcurementPortalPreference, invoicing:StartInvoiceCorrection and 1 more

aiops Amazon AI Operations
Oct 13, 2025 / 8 never-before-seen actions

First of them in AIOpsOperatorAccess

aiops:CreateReport, aiops:GenerateReport, aiops:GetFact, aiops:GetFactVersions, aiops:GetReport, aiops:ListFacts, aiops:PutFact, aiops:UpdateReport

emr-containers Amazon EMR on EKS (EMR Containers)
Oct 31, 2025 / 8 never-before-seen actions

First of them in SageMakerStudioProjectProvisioningRolePolicy

emr-containers:CreateManagedEndpoint, emr-containers:CreateSecurityConfiguration, emr-containers:CreateVirtualCluster, emr-containers:DeleteManagedEndpoint, emr-containers:DeleteSecurityConfiguration, emr-containers:DeleteVirtualCluster, emr-containers:DescribeSecurityConfiguration, emr-containers:GetManagedEndpointSessionCredentials

ec2 Amazon EC2
Nov 10, 2025 / 7 never-before-seen actions

First of them in AWSApplicationMigrationNetworkMigrationMultiAccount

ec2:AssociateNatGatewayAddress, ec2:AssociateTrunkInterface, ec2:CopyVolumes, ec2:CreateReplaceRootVolumeTask, ec2:DisassociateNatGatewayAddress, ec2:DisassociateTrunkInterface, ec2:PutResourcePolicy

guardduty Amazon GuardDuty
Nov 20, 2025 / 7 never-before-seen actions

First of them in AWSBackupServiceRolePolicyForScans

guardduty:CreateDetector, guardduty:CreateMembers, guardduty:DeleteDetector, guardduty:EnableOrganizationAdminAccount, guardduty:getMalwareScan, guardduty:UpdateDetector, guardduty:UpdateOrganizationConfiguration

logs Amazon CloudWatch Logs
Dec 2, 2025 / 7 never-before-seen actions

First of them in AWSObservabilityAdminTelemetryEnablementServiceRolePolicy

logs:CreateDelivery, logs:ListAggregateLogGroupSummaries, logs:ListScheduledQueries, logs:ListSourcesForS3TableIntegration, logs:PutDeliveryDestination, logs:PutDeliverySource, logs:PutIndexPolicy

aws-marketplace AWS Marketplace
Dec 1, 2025 / 6 never-before-seen actions

First of them in AWSMarketplaceManageSubscriptions

aws-marketplace:AcceptAgreementPaymentRequest, aws-marketplace:CancelAgreementPaymentRequest, aws-marketplace:GetAgreementPaymentRequest, aws-marketplace:ListAgreementPaymentRequests, aws-marketplace:RejectAgreementPaymentRequest, aws-marketplace:SendAgreementPaymentRequest

inspector2 Amazon Inspector V2
Nov 10, 2025 / 6 never-before-seen actions

First of them in AmazonInspector2ServiceRolePolicy

inspector2:AssociateMember, inspector2:Disable, inspector2:DisableDelegatedAdminAccount, inspector2:Enable, inspector2:EnableDelegatedAdminAccount, inspector2:UpdateOrganizationConfiguration

resource-explorer-2 AWS Resource Explorer
Dec 8, 2025 / 6 never-before-seen actions

First of them in ReadOnlyAccess

resource-explorer-2:GetResourceExplorerSetup, resource-explorer-2:GetServiceIndex, resource-explorer-2:GetServiceView, resource-explorer-2:ListServiceIndexes, resource-explorer-2:ListServiceViews, resource-explorer-2:ListStreamingAccessForServices

sso AWS IAM Identity Center
Oct 3, 2025 / 6 never-before-seen actions

First of them in AWSControlTowerIdentityCenterManagementPolicy

sso:CreateApplicationInstance, sso:CreateProfile, sso:CreateTrust, sso:PutApplicationSessionConfiguration, sso:UpdateProfile, sso:UpdateTrust

b2bi AWS B2B Data Interchange
Nov 13, 2025 / 5 never-before-seen actions

First of them in AWSConfigServiceRolePolicy

b2bi:GetCapability, b2bi:GetTransformer, b2bi:ListCapabilities, b2bi:ListTagsForResource, b2bi:ListTransformers

bedrock-agentcore Amazon Bedrock Agentcore
Oct 13, 2025 / 5 never-before-seen actions

First of them in BedrockAgentCoreRuntimeIdentityServiceRolePolicy

bedrock-agentcore:AllowVendedLogDeliveryForResource, bedrock-agentcore:GetWorkloadAccessToken, bedrock-agentcore:GetWorkloadAccessTokenForJWT, bedrock-agentcore:GetWorkloadAccessTokenForUserId, bedrock-agentcore:ListTagsForResource

eks Amazon Elastic Kubernetes Service
Nov 10, 2025 / 5 never-before-seen actions

First of them in AWSBackupServiceRolePolicyForRestores

eks:AccessKubernetesApi, eks:CreateCluster, eks:CreateFargateProfile, eks:CreateNodegroup, eks:UpdateClusterConfig

medialive AWS Elemental MediaLive
Nov 13, 2025 / 5 never-before-seen actions

First of them in AWSConfigServiceRolePolicy

medialive:DescribeAccountConfiguration, medialive:DescribeChannelPlacementGroup, medialive:DescribeCluster, medialive:DescribeNetwork, medialive:ListChannelPlacementGroups

ssm-sap AWS Systems Manager for SAP
Oct 1, 2025 / 5 never-before-seen actions

First of them in ReadOnlyAccess

ssm-sap:getConfigurationCheckOperation, ssm-sap:listConfigurationCheckDefinitions, ssm-sap:listConfigurationCheckOperations, ssm-sap:listSubCheckResults, ssm-sap:listSubCheckRuleResults

backup AWS Backup
Nov 20, 2025 / 4 never-before-seen actions

First of them in AWSBackupGuardDutyRolePolicyForScans

backup:CreateBackupAccessPoint, backup:DeleteBackupAccessPoint, backup:describeBackupAccessPoint, backup:StartScanJob

cleanrooms AWS Clean Rooms
Dec 16, 2025 / 4 never-before-seen actions

First of them in ReadOnlyAccess

cleanrooms:GetCollaborationChangeRequest, cleanrooms:GetProtectedJob, cleanrooms:ListCollaborationChangeRequests, cleanrooms:ListProtectedJobs

codeartifact AWS CodeArtifact
Oct 7, 2025 / 3 never-before-seen actions

First of them in AWS_ConfigRole

codeartifact:DescribePackageGroup, codeartifact:ListAllowedRepositoriesForGroup, codeartifact:ListPackageGroups

connect Amazon Connect
Oct 7, 2025 / 3 never-before-seen actions

First of them in AWS_ConfigRole

connect:describeInstanceAttribute, connect:DescribeTrafficDistributionGroup, connect:DescribeView

customer-verification AWS Customer Verification Service
Dec 11, 2025 / 3 never-before-seen actions

First of them in AWSAccountSettingsManagementRole

customer-verification:CreateCustomerVerificationDetails, customer-verification:CreateUploadUrls, customer-verification:UpdateCustomerVerificationDetails

dsql Amazon Aurora DSQL
Oct 23, 2025 / 3 never-before-seen actions

First of them in AmazonAuroraDSQLConsoleFullAccess

dsql:DeleteClusterPolicy, dsql:GetClusterPolicy, dsql:PutClusterPolicy

glue AWS Glue
Nov 17, 2025 / 3 never-before-seen actions

First of them in SageMakerStudioAdminIAMDefaultExecutionPolicy

glue:FederateAuthorization, glue:RenameTable, glue:TestConnection

identitystore AWS Identity Store
Nov 24, 2025 / 3 never-before-seen actions

First of them in AWSIdentityCenterExternalManagementPolicy

identitystore:CreateUser, identitystore:DeleteUser, identitystore:UpdateUser

social-messaging AWS End User Messaging Social
Oct 28, 2025 / 3 never-before-seen actions

First of them in AmazonConnectServiceLinkedRolePolicy

social-messaging:GetWhatsAppMessageTemplate, social-messaging:ListLinkedWhatsAppBusinessAccounts, social-messaging:ListWhatsAppMessageTemplates

appsync AWS AppSync
Dec 9, 2025 / 2 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

appsync:getDataSourceIntrospection, appsync:getGraphqlApiEnvironmentVariables

athena Amazon Athena
Nov 17, 2025 / 2 never-before-seen actions

First of them in SageMakerStudioAdminIAMDefaultExecutionPolicy

athena:GetResourceDashboard, athena:GetSessionEndpoint

cloudformation AWS CloudFormation & Cloud Control API
Oct 10, 2025 / 2 never-before-seen actions

First of them in AWSControlTowerServiceRolePolicy

cloudformation:ActivateOrganizationsAccess, cloudformation:DescribeOrganizationsAccess

entityresolution AWS Entity Resolution
Oct 7, 2025 / 2 never-before-seen actions

First of them in AWS_ConfigRole

entityresolution:getMatchingWorkflow, entityresolution:listMatchingWorkflows

gamelift Amazon GameLift Servers
Nov 13, 2025 / 2 never-before-seen actions

First of them in AWSConfigServiceRolePolicy

gamelift:DescribeContainerGroupDefinition, gamelift:ListContainerGroupDefinitions

iot AWS IoT
Nov 13, 2025 / 2 never-before-seen actions

First of them in AWSConfigServiceRolePolicy

iot:DescribeCertificateProvider, iot:ListCertificateProviders

lambda AWS Lambda
Dec 2, 2025 / 2 never-before-seen actions

First of them in AWSLambdaBasicDurableExecutionRolePolicy

lambda:CheckpointDurableExecution, lambda:getDurableExecutionState

network-firewall AWS Network Firewall
Dec 9, 2025 / 2 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

network-firewall:describeVpcEndpointAssociation, network-firewall:listVpcEndpointAssociations

organizations AWS Organizations
Nov 27, 2025 / 2 never-before-seen actions

First of them in AWSBillingConductorFullAccess

organizations:DescribeResponsibilityTransfer, organizations:ListInboundResponsibilityTransfers

partnercentral-account-management AWS Partner central account management
Dec 1, 2025 / 2 never-before-seen actions

First of them in AWSMarketplaceSellerProductsFullAccess

partnercentral-account-management:AccessLegacyPartnerCentral, partnercentral-account-management:AccessMarketingCentral

route53resolver Amazon Route 53 Resolver
Dec 2, 2025 / 2 never-before-seen actions

First of them in AWSObservabilityAdminTelemetryEnablementServiceRolePolicy

route53resolver:AssociateResolverQueryLogConfig, route53resolver:CreateResolverQueryLogConfig

securityhub AWS Security Hub
Dec 9, 2025 / 2 never-before-seen actions

First of them in AWSSupportServiceRolePolicy

securityhub:getFindingHistory, securityhub:listAutomationRules

shield AWS Shield
Oct 7, 2025 / 2 never-before-seen actions

First of them in AWS_ConfigRole

shield:describeProtectionGroup, shield:ListTagsForResource

signin AWS Signin
Nov 19, 2025 / 2 never-before-seen actions

First of them in SignInLocalDevelopmentAccess

signin:AuthorizeOAuth2Access, signin:CreateOAuth2Token

sso-directory AWS IAM Identity Center Directory
Oct 3, 2025 / 2 never-before-seen actions

First of them in AWSControlTowerIdentityCenterManagementPolicy

sso-directory:CreateGroup, sso-directory:CreateUser

timestream-influxdb Amazon Timestream InfluxDB
Dec 17, 2025 / 2 never-before-seen actions

First of them in AmazonTimestreamInfluxDBFullAccess

timestream-influxdb:RebootDbCluster, timestream-influxdb:RebootDbInstance

account AWS Account Management
Dec 11, 2025 / 1 never-before-seen action

First of them in AWSAccountSettingsManagementRole

account:CloseAccount

amplifyuibuilder AWS Amplify UI Builder
Nov 13, 2025 / 1 never-before-seen action

First of them in AWSConfigServiceRolePolicy

amplifyuibuilder:ListForms

application-autoscaling AWS Application Auto Scaling
Nov 13, 2025 / 1 never-before-seen action

First of them in AmazonECSInfrastructureRoleforExpressGatewayServices

application-autoscaling:TagResource

application-signals Amazon CloudWatch Application Signals
Nov 20, 2025 / 1 never-before-seen action

First of them in CloudWatchApplicationSignalsReadOnlyAccess

application-signals:ListEntityEvents

aps Amazon Managed Service for Prometheus
Nov 13, 2025 / 1 never-before-seen action

First of them in AWSConfigServiceRolePolicy

aps:DescribeScraperLoggingConfiguration

artifact AWS Artifact
Dec 16, 2025 / 1 never-before-seen action

First of them in AWSArtifactReportsReadOnlyAccess

artifact:ListReportVersions

cloudfront Amazon CloudFront
Nov 13, 2025 / 1 never-before-seen action

First of them in AWSConfigServiceRolePolicy

cloudfront:listConnectionGroups

cloudtrail AWS CloudTrail
Nov 13, 2025 / 1 never-before-seen action

First of them in AWSConfigServiceRolePolicy

cloudtrail:GetDashboard

config AWS Config
Nov 10, 2025 / 1 never-before-seen action

First of them in NetworkSecurityDirectorServiceLinkedRolePolicy

config:ListConfigurationRecorders

cost-optimization-hub AWS Cost Optimization Hub
Nov 19, 2025 / 1 never-before-seen action

First of them in CostOptimizationHubAdminAccess

cost-optimization-hub:ListEfficiencyMetrics

dynamodb Amazon DynamoDB
Dec 11, 2025 / 1 never-before-seen action

First of them in ConsoleFullAccessFromVercel

dynamodb:ConditionCheckItem

ebs Amazon Elastic Block Store
Nov 20, 2025 / 1 never-before-seen action

First of them in AWSBackupGuardDutyRolePolicyForScans

ebs:listChangedBlocks

elasticloadbalancing Elastic Load Balancing
Dec 2, 2025 / 1 never-before-seen action

First of them in AWSObservabilityAdminTelemetryEnablementServiceRolePolicy

elasticloadbalancing:AllowVendedLogDeliveryForResource

groundstation AWS Ground Station
Nov 20, 2025 / 1 never-before-seen action

First of them in AWSGroundStationAgentInstancePolicy

groundstation:GetAgentTaskResponseUrl

kms AWS Key Management Service
Dec 17, 2025 / 1 never-before-seen action

First of them in AIOpsAssistantPolicy

kms:listKeyRotations

mediapackage-vod AWS Elemental MediaPackage VOD
Nov 13, 2025 / 1 never-before-seen action

First of them in AWSConfigServiceRolePolicy

mediapackage-vod:DescribeAsset

rds Amazon RDS, Neptune & DocumentDB
Dec 11, 2025 / 1 never-before-seen action

First of them in ConsoleFullAccessFromVercel

rds:RebootDBCluster

s3 Amazon S3
Nov 21, 2025 / 1 never-before-seen action

First of them in AWSConfigServiceRolePolicy

s3:GetBucketAbac

s3vectors Amazon S3 Vectors
Dec 9, 2025 / 1 never-before-seen action

First of them in AWSSupportServiceRolePolicy

s3vectors:getVectorBucketPolicy

servicecatalog AWS Service Catalog
Oct 7, 2025 / 1 never-before-seen action

First of them in AWS_ConfigRole

servicecatalog:DescribeServiceAction

servicequotas Service Quotas
Oct 13, 2025 / 1 never-before-seen action

First of them in ServiceQuotasReadOnlyAccess

servicequotas:GetAutoManagementConfiguration

ses Amazon SES & Pinpoint Email
Dec 9, 2025 / 1 never-before-seen action

First of them in AWSSupportServiceRolePolicy

ses:getMessageInsights

signer AWS Signer
Dec 9, 2025 / 1 never-before-seen action

First of them in AWSSupportServiceRolePolicy

signer:getRevocationStatus

ssm AWS Systems Manager
Nov 19, 2025 / 1 never-before-seen action

First of them in AmazonSageMakerSpacesControllerPolicy

ssm:ResetServiceSetting

ssm-contacts AWS Systems Manager Incident Manager Contacts
Nov 13, 2025 / 1 never-before-seen action

First of them in AWSConfigServiceRolePolicy

ssm-contacts:ListTagsForResource

verifiedpermissions Amazon Verified Permissions
Nov 13, 2025 / 1 never-before-seen action

First of them in AWSConfigServiceRolePolicy

verifiedpermissions:ListTagsForResource

wisdom Amazon Q in Connect
Nov 19, 2025 / 1 never-before-seen action

First of them in AmazonConnectServiceLinkedRolePolicy

wisdom:Retrieve

Permissions management

13 never-before-seen actions classified as permissions management.

bedrock-agentcore:AllowVendedLogDeliveryForResource, ec2:PutResourcePolicy, elasticloadbalancing:AllowVendedLogDeliveryForResource, glue:TestConnection, rds-db:connect, s3tables:PutTableBucketPolicy, sso-directory:CreateGroup, sso-directory:CreateUser and 5 more

New policies

Endpoint changes

From botocore, separate from the IAM prefixes above. All endpoint changes.

32 service expansions.

GuardDuty announcements

All GuardDuty announcements

Continue exploring

Discoveries

Never-before-seen actions and new AWS services

Stats

Change velocity, seasonality and rankings

Endpoints

New regions, services and endpoint expansions