re:Invent / this season

re:Invent 2026

Nov 30 - Dec 4, 2026 in Las Vegas. What the archive caught from October 1 through December 31: new AWS services, never-before-seen actions, and the endpoint changes beside them.

New AWS services
0
Never-before-seen actions
68
Policy changes
48
Endpoint changes
5

What's New

Major posts from October 1 through December 31. A launch before the conference is pre-re:Invent. Regional rollouts are left out.

Pre-re:Invent

17 announcements
9 more announcements

No new AWS service spotted in this season yet. A new prefix usually shows up in a managed policy before AWS announces it.

New AWS services

No new AWS service spotted in this season yet.

Never-before-seen actions on existing services

s3tables Amazon S3 Tables
Oct 8, 2026 / 13 never-before-seen actions

First of them in ConsoleFullAccessFromVercel

s3tables:DeleteTableBucketPolicy, s3tables:DeleteTableBucketReplication, s3tables:DeleteTablePolicy, s3tables:DeleteTableReplication, s3tables:PutTableBucketMaintenanceConfiguration, s3tables:PutTableBucketReplication, s3tables:PutTableBucketStorageClass, s3tables:PutTableMaintenanceConfiguration and 5 more

datazone Amazon DataZone
Oct 13, 2026 / 12 never-before-seen actions

First of them in SageMakerStudioDataAppsAccessRolePolicy

datazone:CreateDataApp, datazone:DeleteAgentApprovalPolicy, datazone:DeleteConversation, datazone:DeleteDataApp, datazone:DeregisterAgentArtifact, datazone:InvokeAgent, datazone:ListSharedDataApps, datazone:PutAgentApprovalPolicy and 4 more

sagemaker Amazon SageMaker
Oct 13, 2026 / 11 never-before-seen actions

First of them in AmazonSageMakerTrainingSessionAccess

sagemaker:CreateTrainingSession, sagemaker:DeleteTrainingSession, sagemaker:DescribeTrainingSession, sagemaker:ExecuteSamplingOperation, sagemaker:ExecuteTrainingOperation, sagemaker:GetSamplingOperationResult, sagemaker:GetTrainingOperationResult, sagemaker:ListTrainingSessions and 3 more

s3 Amazon S3
Oct 8, 2026 / 10 never-before-seen actions

First of them in ConsoleFullAccessFromVercel

s3:CreateBucketMetadataTableConfiguration, s3:DeleteBucketMetadataTableConfiguration, s3:GetObjectAnnotation, s3:ListObjectAnnotations, s3:PutAnalyticsConfiguration, s3:PutBucketAbac, s3:PutBucketRequestPayment, s3:PutIntelligentTieringConfiguration and 2 more

connect Amazon Connect
Oct 6, 2026 / 5 never-before-seen actions

First of them in AmazonConnectSynchronizationServiceRolePolicy

connect:BatchGetAttachedFileMetadata, connect:CompleteAttachedFileUpload, connect:CreateAttachedFile, connect:DeleteAttachedFile, connect:GetAttachedFile

s3vectors Amazon S3 Vectors
Oct 8, 2026 / 4 never-before-seen actions

First of them in ConsoleFullAccessFromVercel

s3vectors:DeleteVectorBucketPolicy, s3vectors:PutVectorBucketPolicy, s3vectors:TagResource, s3vectors:UntagResource

eks Amazon Elastic Kubernetes Service
Oct 1, 2026 / 3 never-before-seen actions

First of them in AmazonEKSServiceRolePolicy

eks:ActivateCertificateAuthority, eks:CreateCertificateAuthority, eks:DeleteCertificateAuthority

aws-external-anthropic Claude Platform on AWS
Oct 2, 2026 / 2 never-before-seen actions

First of them in AnthropicLimitedAccess

aws-external-anthropic:GetUserProfile, aws-external-anthropic:ListUserProfiles

securityagent AWS Security Agent
Oct 12, 2026 / 2 never-before-seen actions

First of them in AWSSecurityAgentWebAppPolicy

securityagent:BatchDisassociateFindingIssue, securityagent:BatchExportFindings

billing AWS Billing
Oct 2, 2026 / 1 never-before-seen action

First of them in FinOpsAgentAgentPolicy

billing:ListBillingViewSegments

deadline AWS Deadline Cloud
Oct 9, 2026 / 1 never-before-seen action

First of them in AWSDeadlineCloud-UserAccessFarms

deadline:ListMemberships

ec2 Amazon EC2
Oct 9, 2026 / 1 never-before-seen action

First of them in ElasticLoadBalancingFullAccess

ec2:ValidateSecurityGroupQuotasForInterface

lambda AWS Lambda
Oct 1, 2026 / 1 never-before-seen action

First of them in AWSLambdaInvokeWebFunctionEndpointAccess

lambda:InvokeWebFunctionEndpoint

security-ir AWS Security Incident Response
Oct 1, 2026 / 1 never-before-seen action

First of them in AWSSecurityIncidentResponseReadOnlyAccess

security-ir:GetFindingMetrics

social-messaging AWS End User Messaging Social
Oct 3, 2026 / 1 never-before-seen action

First of them in AmazonConnectServiceLinkedRolePolicy

social-messaging:SendWhatsAppCallEvent

Permissions management

5 never-before-seen actions classified as permissions management.

s3tables:DeleteTableBucketPolicy, s3tables:DeleteTablePolicy, s3tables:PutTablePolicy, s3vectors:DeleteVectorBucketPolicy, s3vectors:PutVectorBucketPolicy

New policies

Endpoint changes

From botocore, separate from the IAM prefixes above. All endpoint changes.

  • runtime.sagemaker Oct 7, 2026
  • kafkaconnect Oct 13, 2026
  • aps Oct 14, 2026

2 service expansions.

GuardDuty announcements

All GuardDuty announcements

Continue exploring

Discoveries

Never-before-seen actions and new AWS services

Stats

Change velocity, seasonality and rankings

Endpoints

New regions, services and endpoint expansions