AWSConfigServiceRolePolicy AWS_ConfigRole AWSConfigUserAccess ConfigConformsServiceRolePolicy AWSConfigRulesExecutionRole AWSConfigMultiAccountSetupPolicy AWSConfigRoleForOrganizations AWSConfigRemediationServiceRolePolicy 政策更新

AWS的受管政策AWS Config

AWS受管政策是由AWSAWS受管政策建立和管理的獨立政策旨在為許多常用案例提供許可，以便您可以開始將許可指派給使用者、群組和角色。

請記住，AWS受管政策可能不會授予特定使用案例的最低權限許可，因為這些許可可供所有AWS客戶使用。我們建議您定義特定於使用案例的客戶管理政策，以便進一步減少許可。

您無法變更AWS受管政策中定義的許可。如果AWS更新受AWS管政策中定義的許可，則更新會影響政策連接的所有委託人身分（使用者、群組和角色）。AWS 服務當新的啟動或新的 API 操作可用於現有服務時，AWS最有可能更新AWS受管政策。

如需詳細資訊，請參閱 IAM 使用者指南中的 AWS受管政策。

AWS受管政策： AWSConfigServiceRolePolicy

AWS Config使用名為的服務連結角色AWSServiceRoleForConfig，代表您呼叫其他AWS服務。當您使用AWS 管理主控台進行設定時AWS Config，AWS Config如果您選擇使用 SLR 而非您自己的AWS Identity and Access Management(IAM) 服務角色，則會自動建立此AWS Config SLR。

AWSServiceRoleForConfig SLR 包含受管政策 AWSConfigServiceRolePolicy。此受管政策包含AWS Config資源的唯讀和唯讀許可，以及AWS Config支援的其他服務中資源的唯讀許可。該政策提供全方位存取，以監控和記錄AWS基礎設施中的組態變更，包括超過 100 種AWS服務的許可，例如運算、儲存、聯網、安全性、分析和機器學習服務。

此政策包含下列服務類別的許可：

access-analyzer – 允許主體分析存取模式並擷取安全調查結果。
account – 允許主體擷取帳戶聯絡資訊。
acm 和 acm-pca – 允許主體管理 SSL/TLS 憑證和私有憑證授權單位。
airflow – 允許主體監控受管 Apache Airflow 環境。
amplify 和 amplifyuibuilder – 允許主體監控 Web 應用程式和 UI 元件。
aoss – 允許主體監控 OpenSearch Serverless 集合和安全組態。
app-integrations – 允許主體監控應用程式整合組態。
appconfig – 允許主體監控應用程式組態部署。
appflow – 允許主體監控應用程式之間的資料流程組態。
application-autoscaling 和 application-signals – 允許主體監控自動擴展政策和應用程式效能指標。
appmesh – 允許主體監控服務網格組態。
apprunner – 允許主體監控容器化 Web 應用程式和服務。
appstream – 允許主體監控應用程式串流組態。
appsync – 允許主體監控 GraphQL API 組態。
aps – 允許主體監控 Prometheus 監控組態。
apptest – 允許主體監控應用程式測試組態。
arc-zonal-shift – 允許主體監控區域轉移組態的可用性。
athena – 允許主體監控查詢引擎組態和資料目錄。
auditmanager – 允許主體監控稽核和合規評估。
autoscaling 和 autoscaling-plans – 允許主體監控自動擴展群組和擴展計劃。
b2bi – 允許主體監控business-to-business整合組態。
backup 和 backup-gateway – 允許主體監控備份政策和閘道組態。
batch – 允許主體監控批次運算環境和任務佇列。
bcm-data-exports – 允許主體監控帳單和成本管理資料匯出。
bedrock 和 bedrock-agentcore – 允許主體監控基礎模型和 AI 代理程式組態。
billingconductor – 允許主體監控帳單群組組態。
budgets – 允許主體監控預算組態和動作。
cassandra – 允許主體查詢受管 Cassandra 資料庫組態。
ce – 允許主體監控成本和用量報告組態。
cleanrooms 和 cleanrooms-ml – 允許主體監控資料協作和機器學習組態。
cloud9 – 允許主體監控雲端開發環境組態。
cloudformation – 允許主體以程式碼堆疊組態的形式監控基礎設施。
cloudfront – 允許主體監控內容交付網路組態。
cloudtrail ：允許主體監控 API 記錄和稽核線索組態。
cloudwatch – 允許主體監控指標、警示和儀表板組態。
codeartifact – 允許主體監控軟體套件儲存庫組態。
codebuild – 允許主體監控建置專案組態。
codecommit – 允許主體監控原始程式碼儲存庫組態。
codeconnections – 允許主體監控第三方來源連線。
codedeploy – 允許主體監控應用程式部署組態。
codeguru-profiler 和 codeguru-reviewer – 允許主體監控程式碼分析和分析組態。
codepipeline – 允許主體監控持續整合和部署管道組態。
codestar-connections – 允許主體監控開發人員工具連線。
cognito-identity 和 cognito-idp – 允許主體監控身分和使用者集區組態。
comprehend – 允許主體監控自然語言處理組態。
config – 允許主體管理組態記錄和合規監控。
connect – 允許主體監控聯絡中心組態。

如需支援資源類型的詳細資訊，請參閱支援的資源類型AWS Config和使用的服務連結角色AWS Config。

若要檢視政策的詳細資訊，包括最新版本的 JSON 政策文件，請參閱《 AWS受管政策參考指南》中的 AWSConfigServiceRolePolicy。

建議：使用服務連結角色

建議您使用服務連結角色，除非您有特定的使用案例。服務連結角色會新增所有必要的許可AWS Config，讓如預期般執行。有些功能，例如服務連結組態記錄器，要求您使用服務連結角色。

AWS受管政策： AWS_ConfigRole

若要記錄AWS資源組態，AWS Config需要 IAM 許可才能取得資源的組態詳細資訊。如果想要為AWS Config建立 IAM 角色，您可以使用受管政策 AWS_ConfigRole 並將其連接到 IAM 角色。

每次AWS Config新增AWS資源類型的支援時，都會更新此 IAM 政策。這表示只要 AWS_ConfigRole 角色已連接此受管政策，AWS Config就會繼續擁有記錄支援資源類型組態資料所需的許可。該政策提供全方位存取，以監控和記錄AWS基礎設施中的組態變更，包括超過 100 種AWS服務的許可，例如運算、儲存、聯網、安全性、分析和機器學習服務。如需詳細資訊，請參閱支援的資源類型AWS Config及指派給的 IAM 角色許可AWS Config。

若要檢視政策的詳細資訊，包括最新版本的 JSON 政策文件，請參閱《 AWS受管政策參考指南》中的 AWS_ConfigRole。

AWS受管政策： AWSConfigUserAccess

此 IAM 政策提供使用的存取權AWS Config，包括依資源上的標籤搜尋和讀取所有標籤。這不提供設定的許可AWS Config，這需要管理權限。

檢視政策：AWSConfigUserAccess。

AWS受管政策： ConfigConformsServiceRolePolicy

若要部署和管理一致性套件，AWS Config需要其他AWS服務的 IAM 許可和特定許可。這些可讓您部署和管理具有完整功能的一致性套件，並在每次為一致性套件AWS Config新增新功能時更新。如需一致性套件的詳細資訊，請參閱《一致性套件》。

檢視政策：ConfigConformsServiceRolePolicy。

AWS受管政策： AWSConfigRulesExecutionRole

若要部署AWS自訂 Lambda 規則，AWS Config需要其他AWS服務的 IAM 許可和特定許可。這些允許AWS Lambda函數存取 API AWS Config和定期AWS Config交付至 Amazon S3 的組態快照。評估AWS自訂 Lambda 規則組態變更的函數需要此存取權，而且每次AWS Config新增功能時都會更新。如需AWS自訂 Lambda 規則的詳細資訊，請參閱建立AWS Config自訂 Lambda 規則。如需組態快照的詳細資訊，請參閱《概念 | 組態快照》。如需交付組態快照的詳細資訊，請參閱《管理交付通道》。

檢視政策：AWSConfigRulesExecutionRole。

AWS受管政策： AWSConfigMultiAccountSetupPolicy

若要在組織中跨成員帳戶集中部署、更新和刪除AWS Config規則和一致性套件AWS Organizations，AWS Config需要 IAM 許可和其他AWS服務的特定許可。每次AWS Config新增多帳戶設定新功能時，都會更新此受管政策。如需詳細資訊，請參閱管理組織中所有帳戶的AWS Config規則，以及管理組織中所有帳戶的一致性套件。

檢視政策：AWSConfigMultiAccountSetupPolicy。

AWS受管政策： AWSConfigRoleForOrganizations

若要允許AWS Config呼叫唯讀AWS Organizations APIs，AWS Config需要其他AWS服務的 IAM 許可和特定許可。每次AWS Config新增多帳戶設定新功能時，都會更新此受管政策。如需詳細資訊，請參閱管理組織中所有帳戶的AWS Config規則和管理組織中所有帳戶的一致性套件。

檢視政策：AWSConfigRoleForOrganizations。

AWS受管政策：AWSConfigRemediationServiceRolePolicy

若要允許AWS Config代表您修復NON_COMPLIANT資源，AWS Config需要 IAM 許可和其他AWS服務的特定許可。每次為修復AWS Config新增新功能時，都會更新此受管政策。如需修補的詳細資訊，請參閱使用AWS Config規則修補不合規資源。如需啟動可能AWS Config評估結果之條件的詳細資訊，請參閱概念 |AWS Config規則。

檢視政策：AWSConfigRemediationServiceRolePolicy。

AWS ConfigAWS受管政策的更新

檢視自此服務開始追蹤這些變更AWS Config以來，AWS受管政策更新的詳細資訊。如需此頁面變更的自動提醒，請訂閱AWS Config文件歷史記錄頁面上的 RSS 摘要。

變更	描述	Date
AWS_ConfigRole – 新增 "lightsail：GetActiveNames" "lightsail：GetOperations" "s3：GetBucketAbac"	此政策現在支援 Amazon Lightsail和 Amazon Simple Storage Service (Amazon S3) 的額外許可。	2025 年 11 月 20 日
AWSConfigServiceRolePolicy – 新增 "lightsail：GetActiveNames" "lightsail：GetOperations" "s3：GetBucketAbac"	此政策現在支援 Amazon Lightsail和 Amazon Simple Storage Service (Amazon S3) 的額外許可。	2025 年 11 月 20 日
AWSConfigServiceRolePolicy – 更新了受管政策，具有跨 100 多項AWS服務進行AWS資源組態記錄的完整許可，包括運算、儲存、聯網、安全性、分析和機器學習服務。	此政策現在提供增強型的服務許可文件，並支援所有AWS Config支援組態記錄AWS的服務進行全面監控。	2025 年 11 月 11 日
AWS_ConfigRole – 更新了受管政策，具有跨多項服務進行AWS資源組態記錄的完整許可AWS Identity and Access Management，包括 Amazon Elastic Compute Cloud、Amazon Simple Storage Service AWS Lambda、Amazon Relational Database Service 等。	此政策現在支援跨所有支援AWS的服務進行完整AWS資源組態記錄和監控的額外許可。	2025 年 11 月 10 日
AWS_ConfigRole – 新增 "amplify：GetDomainAssociation" "amplify：ListDomainAssociations" "amplify：ListTagsForResource" "appsync：GetSourceApiAssociation" "appsync：ListSourceApiAssociations" "bedrock：GetFlow" "bedrock：ListAgentCollaborators" "bedrock：ListFlows" "bedrock：ListPrompts" "cloudTrail：GetResourcePolicy" "cloudformation：DescribePublisher" "codeartifact：DescribePackageGroup" "codeartifact：ListAllowedRepositoriesForGroup"""codeartifact：ListPackageGroups""ListActionTypes ListTagsForResource ListWebhooks DescribeTrafficDistributionGroup ListTrafficDistributionGroups ListFarms GetTransitGatewayRouteTablePropagations SearchLocalGatewayRoutes SearchTransitGatewayMulticastGroups GetMatchingWorkflow ListMatchingWorkflows ListAssetModelCompositeModels ListAssetModelProperties ListAssetProperties ListAssociatedAssets ListPublicKeys GetProvisionedConcurrencyConfig GetRuntimeManagementConfig ListFunctionEventInvokeConfigs ListFunctionUrlConfigs DescribePipe ListPipes DescribeRefreshSchedule ListRefreshSchedules ListSnapshotCopyConfigurations GetResourcePolicy GetCrl ListCrls DescribeApp DescribeUserProfile ListApps ListModelPackages ListUserProfiles GetResourcePolicy ListSubscribers ListTagsForResource DescribeServiceAction ListApplications ListAssociatedResources ListProtectionGroups ListTagsForResource GetReplicationSet ListReplicationSets DescribeAssociation DescribePatchBaselines GetDefaultPatchBaseline GetPatchBaseline GetResourcePolicies ListAssociations ListResourceDataSync ListLoggingConfigurations ListCodeInterpreters GetCodeInterpreter ListBrowsers GetBrowser ListAgentRuntimes GetAgentRuntime ListAgentRuntimeEndpoints GetAgentRuntimeEndpoint	此政策現在支援AWS Amplify、AWS AppSync、Amazon Bedrock、AWS CloudTrailCloudFormation、AWS CodeArtifactAWS CodePipeline、Amazon Connect、AWS Deadline Cloud、Amazon EC2 AWS Entity Resolution、AWS IoT SiteWise、Amazon IVS、Amazon EventBridge AWS Lambda、Amazon Quick Suite、Amazon Redshift、Amazon Redshift Serverless AWS Identity and Access Management Roles Anywhere、Amazon SageMaker、AWS Secrets Manager、Amazon Security Lake AWS Service Catalog、AWS Shield、Amazon EC2 Systems Manager 和的其他許可AWS WAFV2。	2025 年 10 月 1 日
AWSConfigServiceRolePolicy – 新增 "amplify：GetDomainAssociation" "amplify：ListDomainAssociations" "amplify：ListTagsForResource" "appsync：GetSourceApiAssociation" "appsync：ListSourceApiAssociations" "bedrock：GetFlow" "bedrock：ListAgentCollaborators" "bedrock：ListFlows" "bedrock：ListPrompts" "cloudTrail：GetResourcePolicy" "cloudformation：DescribePublisher" "codeartifact：DescribePackageGroup" "codeartifact：ListAllowedRepositoriesForGroup"""codeartifact：ListPackageGroupsListPacks""ListActionTypes ListTagsForResource ListWebhooks DescribeTrafficDistributionGroup ListTrafficDistributionGroups ListFarms GetTransitGatewayRouteTablePropagations SearchLocalGatewayRoutes SearchTransitGatewayMulticastGroups GetMatchingWorkflow ListMatchingWorkflows ListAssetModelCompositeModels ListAssetModelProperties ListAssetProperties ListAssociatedAssets ListPublicKeys GetProvisionedConcurrencyConfig GetRuntimeManagementConfig ListFunctionEventInvokeConfigs ListFunctionUrlConfigs DescribePipe ListPipes DescribeRefreshSchedule ListRefreshSchedules ListSnapshotCopyConfigurations GetResourcePolicy GetCrl ListCrls DescribeApp DescribeUserProfile ListApps ListModelPackages ListUserProfiles GetResourcePolicy ListSubscribers ListTagsForResource DescribeServiceAction ListApplications ListAssociatedResources ListProtectionGroups ListTagsForResource GetReplicationSet ListReplicationSets DescribeAssociation DescribePatchBaselines GetDefaultPatchBaseline GetPatchBaseline GetResourcePolicies ListAssociations ListResourceDataSync ListLoggingConfigurations ListCodeInterpreters GetCodeInterpreter ListBrowsers GetBrowser ListAgentRuntimes GetAgentRuntime ListAgentRuntimeEndpoints GetAgentRuntimeEndpoint	此政策現在支援AWS Amplify、AWS AppSync、Amazon Bedrock、AWS CloudTrailCloudFormation、AWS CodeArtifactAWS CodePipeline、Amazon Connect、AWS Deadline Cloud、Amazon EC2 AWS Entity Resolution、AWS IoT SiteWise、Amazon IVS、Amazon EventBridge AWS Lambda、Amazon Quick Suite、Amazon Redshift、Amazon Redshift Serverless AWS Identity and Access Management Roles Anywhere、Amazon SageMaker、AWS Secrets Manager、Amazon Security Lake AWS Service Catalog、AWS Shield、Amazon EC2 Systems Manager 和的其他許可AWS WAFV2。	2025 年 10 月 1 日
AWS_ConfigRole – 新增「arc-zonal-shift：GetAutoshiftObserverNotificationStatus」， "bedrock：GetModelInvocationLoggingConfiguration"， "cloudtrail：GetEventConfiguration"， "codeartifact：DescribeDomain"，「codeartifact：GetDomainPermissionsPolicy」，「截止日期：GetFleet」，「截止日期：GetQueueFleetAssociation」，「截止日期：ListFleets」，「截止日期：ListQueueFleetAssociations」，「截止日期：ListTagsForResource」， "dms：DescribeDataMigrations"， "dms：ListMigrationProjects"，「glue：GetDataCatalogEncryptionSettings」， "kafkaconnect：DescribeCustomPlugin"， "kafkaconnect：DescribeWorkerConfiguration"， "kafkaconnect：ListCustomPlugins"， "kafkaconnect：ListTagsForResource"， "kafkaconnect：ListWorkerConfigurations"， "lakeformation：DescribeLakeFormationIdentityCenterConfiguration"， "medialive：DescribeMultiplexProgram"， "medialive：ListMultiplexPrograms"， "mediapackagev2：GetChannelGroup"， "mediapackagev2：ListChannelGroups"， "rds：DescribeEngineDefaultParameters"，「rolesanywhere：GetProfile」，「rolesanywhere：GetTrustAnchor」， "rolesanywhere：ListProfiles"，「rolesanywhere：ListTagsForResource」，「rolesanywhere：ListTrustAnchors」， "s3：GetAccessGrant"， "s3：ListAccessGrants"， "secretsmanager：DescribeSecret"， "securitylake：ListDataLakeExceptions"， "securitylake：ListDataLakes"， "securitylake：ListLogSources"， "servicecatalog：GetAttributeGroup"， "servicecatalog：ListAttributeGroups"，「servicecatalog：ListServiceActions」，「servicecatalog：ListServiceActionsForProvisioningArtifact」， "ses：GetTrafficPolicy"， "ses：ListTagsForResource"， "ses：ListTrafficPolicies"， "xray：GetGroup"， "xray：GetGroups"， "xray：GetSamplingRules"， "xray：ListResourcePolicies"， "xray：ListTagsForResource"	此政策現在支援 Amazon Bedrock AWS ARC - Zonal Shift、、AWS CloudTrailAWS CodeArtifactAWS Deadline Cloud、AWS Database Migration ServiceAWS Glue、AWS Identity and Access Management、、Amazon Managed Streaming for Apache Kafka AWS Lake Formation、Amazon CloudWatch Logs、AWS Elemental MediaLiveAWS Elemental MediaPackage、Amazon Relational Database Service、Amazon Simple Storage Service AWS Secrets Manager、Amazon Security Lake、AWS Service Catalog、Amazon Simple Email Service 和的其他許可AWS X-Ray。	2025 年 7 月 28 日
AWSConfigServiceRolePolicy – 新增「arc-zonal-shift：GetAutoshiftObserverNotificationStatus」， "bedrock：GetModelInvocationLoggingConfiguration"， "cloudtrail：GetEventConfiguration"， "codeartifact：DescribeDomain"，「codeartifact：GetDomainPermissionsPolicy」，「截止日期：GetFleet」，「截止日期：GetQueueFleetAssociation」，「截止日期：ListFleets」，「截止日期：ListQueueFleetAssociations」，「截止日期：ListTagsForResource」， "dms：DescribeDataMigrations"， "dms：ListMigrationProjects"，「glue：GetDataCatalogEncryptionSettings」， "iam：ListPolicies"， "kafkaconnect：DescribeCustomPlugin"， "kafkaconnect：DescribeWorkerConfiguration"， "kafkaconnect：ListCustomPlugins"， "kafkaconnect：ListTagsForResource"， "kafkaconnect：ListWorkerConfigurations"， "lakeformation：DescribeLakeFormationIdentityCenterConfiguration"， "logs：DescribeIndexPolicies"， "logs：ListTagsForResource"， "medialive：DescribeMultiplexProgram"， "medialive：ListMultiplexPrograms"， "mediapackagev2：GetChannelGroup"， "mediapackagev2：ListChannelGroups"， "rds：DescribeEngineDefaultParameters"，「rolesanywhere：GetProfile」，「rolesanywhere：GetTrustAnchor」， "rolesanywhere：ListProfiles"，「rolesanywhere：ListTagsForResource」，「rolesanywhere：ListTrustAnchors」， "s3：GetAccessGrant"， "s3：ListAccessGrants"， "secretsmanager：DescribeSecret"， "securitylake：ListDataLakeExceptions"， "securitylake：ListDataLakes"， "securitylake：ListLogSources"， "servicecatalog：GetAttributeGroup"， "servicecatalog：ListAttributeGroups"，「servicecatalog：ListServiceActions」，「servicecatalog：ListServiceActionsForProvisioningArtifact」， "ses：GetTrafficPolicy"， "ses：ListTagsForResource"， "ses：ListTrafficPolicies"， "xray：GetGroup"， "xray：GetGroups"， "xray：GetSamplingRules"， "xray：ListResourcePolicies"， "xray：ListTagsForResource"， "arn：aws：apigateway：：/account"， "arn：aws：apigateway：：/usageplans"， "arn：aws：apigateway：：/usageplans/"。	此政策現在支援 Amazon Bedrock AWS ARC - Zonal Shift、AWS CloudTrail、AWS CodeArtifactAWS Deadline Cloud、AWS Database Migration ServiceAWS Glue、AWS Identity and Access Management、、Amazon Managed Streaming for Apache Kafka AWS Lake Formation、Amazon CloudWatch Logs、AWS Elemental MediaLiveAWS Elemental MediaPackage、Amazon Relational Database Service、Amazon Simple Storage Service AWS Secrets Manager、Amazon Security Lake AWS Service Catalog、Amazon Simple Email Service AWS X-Ray和 Amazon API Gateway 的其他許可。	2025 年 7 月 28 日
AWSConfigServiceRolePolicy – 新增「backup-gateway：GetHypervisor」， "backup-gateway：ListHypervisors"， "bcm-data-exports：GetExport"， "bcm-data-exports：ListExports"， "bcm-data-exports：ListTagsForResource"， "bedrock：GetAgent"， "bedrock：GetAgentActionGroup"， "bedrock：GetAgentKnowledgeBase"， "bedrock：GetDataSource"， "bedrock：GetFlowAlias"， "bedrock：GetFlowVersion"， "bedrock：ListAgentActionGroups"， "bedrock：ListAgentKnowledgeBases"， "bedrock：ListDataSources"， "bedrock：ListFlowAliases"， "bedrock：ListFlowVersions"， "cloudformation：BatchDescribeTypeConfigurations"， "cloudformation：DescribeStackInstance"， "cloudformation：DescribeStackSet"， "cloudformation：ListStackInstances"， "cloudformation：ListStackSets"， "cloudfront：GetPublicKey"， "cloudfront：GetRealtimeLogConfig"， "cloudfront：ListPublicKeys"， "cloudfront：ListRealtimeLogConfigs"， "entityresolution：GetIdMappingWorkflow"， "entityresolution：GetSchemaMapping"， "entityresolution：ListIdMappingWorkflows"， "entityresolution：ListSchemaMappings"， "entityresolution：ListTagsForResource"， "iotdeviceadvisor：GetSuiteDefinition"， "iotdeviceadvisor：ListSuiteDefinitions"， "lambda：GetEventSourceMapping"， "lambda：ListEventSourceMappings"， "mediapackagev2：GetChannel"， "mediapackagev2：ListChannels"，「networkmanager：GetTransitGatewayPeering」，「networkmanager：ListPeerings」， "pca-connector-ad：GetDirectoryRegistration"，「pca-connector-ad：ListDirectoryRegistrations」，「pca-connector-ad：ListTagsForResource」， "rds：DescribeDBShardGroups"， "rds：DescribeIntegrations"， "redshift：DescribeIntegrations"， "s3tables：GetTableBucket"， "s3tables：GetTableBucketEncryption"， "s3tables：GetTableBucketMaintenanceConfiguration"， "s3tables：ListTableBuckets"， "ssm-quicksetup：GetConfigurationManager"，「ssm-quicksetup：ListConfigurationManagers」	此政策現在支援AWS Backup gateway、AWS 帳單與成本管理、Amazon Bedrock、AWS CloudFormation、Amazon CloudFront、AWS Entity ResolutionAWS IoT Core Device Advisor、AWS LambdaAWS Network Manager、AWS 私有憑證授權單位、Amazon Relational Database Service、Amazon Redshift、Amazon S3 Tables、的其他許可AWS Systems Manager 快速設定。	2025 年 6 月 18 日
AWS_ConfigRole – 新增「backup-gateway：GetHypervisor」， "backup-gateway：ListHypervisors"， "bcm-data-exports：GetExport"， "bcm-data-exports：ListExports"， "bcm-data-exports：ListTagsForResource"， "bedrock：GetAgent"， "bedrock：GetAgentActionGroup"， "bedrock：GetAgentKnowledgeBase"， "bedrock：GetDataSource"， "bedrock：GetFlowAlias"， "bedrock：GetFlowVersion"， "bedrock：ListAgentActionGroups"， "bedrock：ListAgentKnowledgeBases"， "bedrock：ListDataSources"， "bedrock：ListFlowAliases"， "bedrock：ListFlowVersions"， "cloudformation：BatchDescribeTypeConfigurations"， "cloudformation：DescribeStackInstance"， "cloudformation：DescribeStackSet"， "cloudformation：ListStackInstances"， "cloudformation：ListStackSets"， "cloudfront：GetPublicKey"， "cloudfront：GetRealtimeLogConfig"， "cloudfront：ListPublicKeys"， "cloudfront：ListRealtimeLogConfigs"， "entityresolution：GetIdMappingWorkflow"， "entityresolution：GetSchemaMapping"， "entityresolution：ListIdMappingWorkflows"， "entityresolution：ListSchemaMappings"， "entityresolution：ListTagsForResource"， "iotdeviceadvisor：GetSuiteDefinition"， "iotdeviceadvisor：ListSuiteDefinitions"， "lambda：GetEventSourceMapping"， "lambda：ListEventSourceMappings"，「networkmanager：GetTransitGatewayPeering」，「networkmanager：ListPeerings」， "pca-connector-ad：GetDirectoryRegistration"，「pca-connector-ad：ListDirectoryRegistrations」，「pca-connector-ad：ListTagsForResource」， "rds：DescribeDBShardGroups"， "rds：DescribeIntegrations"， "redshift：DescribeIntegrations"， "s3tables：GetTableBucket"， "s3tables：GetTableBucketEncryption"， "s3tables：GetTableBucketMaintenanceConfiguration"， "s3tables：ListTableBuckets"， "ssm-quicksetup：GetConfigurationManager"，「ssm-quicksetup：ListConfigurationManagers」	此政策現在支援AWS Backup gateway、AWS 帳單與成本管理、Amazon Bedrock、AWS CloudFormation、Amazon CloudFront、AWS Entity ResolutionAWS IoT Core Device Advisor、AWS LambdaAWS Network Manager、AWS 私有憑證授權單位、Amazon Relational Database Service、Amazon Redshift、Amazon S3 Tables 的其他許可AWS Systems Manager 快速設定。	2025 年 6 月 18 日
AWS_ConfigRole – 新增 "bedrock:GetGuardrail", "bedrock:GetInferenceProfile", "bedrock:GetKnowledgeBase", "bedrock:ListGuardrails", "bedrock:ListInferenceProfiles", "bedrock:ListKnowledgeBases", "bedrock:ListTagsForResource"	此政策現在支援 Amazon Bedrock 的其他許可。	2025 年 5 月 27 日
AWSConfigServiceRolePolicy – 新增 "bedrock:GetGuardrail", "bedrock:GetInferenceProfile", "bedrock:GetKnowledgeBase", "bedrock:ListGuardrails", "bedrock:ListInferenceProfiles", "bedrock:ListKnowledgeBases", "bedrock:ListTagsForResource"	此政策現在支援 Amazon Bedrock 的其他許可。	2025 年 5 月 27 日
AWS_ConfigRole – 新增 "b2bi:GetPartnership", "b2bi:GetProfile", "b2bi:ListPartnerships", "b2bi:ListProfiles", "bedrock:ListAgents", "cleanrooms:GetConfiguredTable", "cleanrooms:GetConfiguredTableAnalysisRule", "cleanrooms:GetMembership", "cleanrooms:GetPrivacyBudgetTemplate", "cleanrooms:ListConfiguredTables", "cleanrooms:ListMemberships", "cleanrooms:ListPrivacyBudgetTemplates", "codeconnections:GetConnection", "codeconnections:ListConnections", "codeconnections:ListTagsForResource", "directconnect:DescribeConnections", "dms:DescribeReplicationConfigs", "logs:DescribeAccountPolicies", "logs:DescribeResourcePolicies", "macie2:ListAutomatedDiscoveryAccounts", "managedblockchain:GetAccessor", "managedblockchain:ListAccessors", "qbusiness:GetApplication", "qbusiness:ListApplications", "qbusiness:ListTagsForResource", "route53profiles:GetProfile", "route53profiles:GetProfileAssociation", "route53profiles:ListProfileAssociations", "route53profiles:ListProfiles", "route53profiles:ListTagsForResource", "s3:GetAccessGrantsInstance", "s3:GetAccessGrantsLocation", "s3:ListAccessGrantsInstances", "s3:ListAccessGrantsLocations", "sagemaker:DescribeCluster", "sagemaker:DescribeMlflowTrackingServer", "sagemaker:DescribeStudioLifecycleConfig", "sagemaker:ListClusters", "sagemaker:ListMlflowTrackingServers", "sagemaker:ListStudioLifecycleConfigs", "securityhub:DescribeStandardsControls", "securityhub:GetEnabledStandards", "ssm-contacts:GetContact", "ssm-contacts:GetContactChannel", "ssm-contacts:ListContactChannels", "ssm-contacts:ListContacts", "ssm-incidents:GetResponsePlan", "ssm-incidents:ListResponsePlans", "ssm-incidents:ListTagsForResource", "ssm:DescribeInstanceInformation"	此政策現在支援AWS B2B 資料交換、Amazon Bedrock、AWS Clean Rooms、AWS CodeConnectionsAWS Direct Connect、AWS Database Migration Service(AWS DMS)、Amazon CloudWatch Logs、Amazon Macie、Amazon Managed Blockchain、Amazon Q Business、Route 53 Profiles、Amazon Simple Storage Service (Amazon S3)AWS Security Hub CSPM、Amazon SageMaker AI AWS Systems Manager Incident ManagerAWS Systems Manager Incident Manager以及聯絡人和的其他許可AWS Systems Manager。	2025 年 4 月 8 日
AWSConfigServiceRolePolicy – 新增 "b2bi:GetPartnership", "b2bi:GetProfile", "b2bi:ListPartnerships", "b2bi:ListProfiles", "bedrock:ListAgents", "cleanrooms:GetConfiguredTable", "cleanrooms:GetConfiguredTableAnalysisRule", "cleanrooms:GetMembership", "cleanrooms:GetPrivacyBudgetTemplate", "cleanrooms:ListConfiguredTables", "cleanrooms:ListMemberships", "cleanrooms:ListPrivacyBudgetTemplates", "codeconnections:GetConnection", "codeconnections:ListConnections", "codeconnections:ListTagsForResource", "directconnect:DescribeConnections", "dms:DescribeReplicationConfigs", "logs:DescribeAccountPolicies", "logs:DescribeResourcePolicies", "macie2:ListAutomatedDiscoveryAccounts", "managedblockchain:GetAccessor", "managedblockchain:ListAccessors", "qbusiness:GetApplication", "qbusiness:ListApplications", "qbusiness:ListTagsForResource", "route53profiles:GetProfile", "route53profiles:GetProfileAssociation", "route53profiles:ListProfileAssociations", "route53profiles:ListProfiles", "route53profiles:ListTagsForResource", "s3:GetAccessGrantsInstance", "s3:GetAccessGrantsLocation", "s3:ListAccessGrantsInstances", "s3:ListAccessGrantsLocations", "sagemaker:DescribeCluster", "sagemaker:DescribeMlflowTrackingServer", "sagemaker:DescribeStudioLifecycleConfig", "sagemaker:ListClusters", "sagemaker:ListMlflowTrackingServers", "sagemaker:ListStudioLifecycleConfigs", "securityhub:DescribeStandardsControls", "securityhub:GetEnabledStandards", "ssm-contacts:GetContact", "ssm-contacts:GetContactChannel", "ssm-contacts:ListContactChannels", "ssm-contacts:ListContacts", "ssm-incidents:GetResponsePlan", "ssm-incidents:ListResponsePlans", "ssm-incidents:ListTagsForResource", "ssm:DescribeInstanceInformation"	此政策現在支援AWS B2B 資料交換、Amazon Bedrock、AWS Clean Rooms、AWS CodeConnectionsAWS Direct Connect、AWS Database Migration Service(AWS DMS)、Amazon CloudWatch Logs、Amazon Macie、Amazon Managed Blockchain、Amazon Q Business、Route 53 Profiles、Amazon Simple Storage Service (Amazon S3)AWS Security Hub CSPM、Amazon SageMaker AI AWS Systems Manager Incident ManagerAWS Systems Manager Incident Manager以及聯絡人和的其他許可AWS Systems Manager。此政策現在也支援透過包含資源模式「`arn:aws:apigateway:::/domainnames/`」來存取所有 Amazon API Gateway 網域名稱的許可。	2025 年 4 月 8 日
AWS_ConfigRole – 新增 "ec2:GetAllowedImagesSettings"	此政策現在支援 Amazon Elastic Compute Cloud (Amazon EC2) 的其他許可。	2025 年 3 月 4 日
AWSConfigServiceRolePolicy – 新增 "ec2:GetAllowedImagesSettings"	此政策現在支援 Amazon Elastic Compute Cloud (Amazon EC2) 的其他許可。	2025 年 3 月 4 日
AWS_ConfigRole – 新增 "cleanrooms-ml:GetTrainingDataset", "cleanrooms-ml:ListTrainingDatasets", "comprehend:DescribeFlywheel", "comprehend:ListFlywheels", "comprehend:ListTagsForResource", "ec2:GetSnapshotBlockPublicAccessState", "omics:GetAnnotationStore", "omics:GetRunGroup", "omics:GetSequenceStore", "omics:GetVariantStore", "omics:ListAnnotationStores", "omics:ListRunGroups", "omics:ListSequenceStores", "omics:ListTagsForResource", "omics:ListVariantStores", "s3express:GetEncryptionConfiguration", "s3express:GetLifecycleConfiguration", "ses:GetDedicatedIpPool", "ses:GetDedicatedIps", and "ses:ListDedicatedIpPools"	此政策現在支援AWS Clean Rooms、Amazon Comprehend、Amazon Elastic Compute Cloud (Amazon EC2)AWS HealthOmics、Amazon Simple Storage Service (Amazon S3) 和 Amazon Simple Email Service (Amazon SES) 的其他許可。	2025 年 1 月 16 日
AWSConfigServiceRolePolicy – 新增 "cleanrooms-ml:GetTrainingDataset", "cleanrooms-ml:ListTrainingDatasets", "comprehend:DescribeFlywheel", "comprehend:ListFlywheels", "comprehend:ListTagsForResource", "ec2:GetSnapshotBlockPublicAccessState", "omics:GetAnnotationStore", "omics:GetRunGroup", "omics:GetSequenceStore", "omics:GetVariantStore", "omics:ListAnnotationStores", "omics:ListRunGroups", "omics:ListSequenceStores", "omics:ListTagsForResource", "omics:ListVariantStores", "s3express:GetEncryptionConfiguration", "s3express:GetLifecycleConfiguration", "ses:GetDedicatedIpPool", "ses:GetDedicatedIps", and "ses:ListDedicatedIpPools"	此政策現在支援AWS Clean Rooms、Amazon Comprehend、Amazon Elastic Compute Cloud (Amazon EC2)AWS HealthOmics、Amazon Simple Storage Service (Amazon S3) 和 Amazon Simple Email Service (Amazon SES) 的其他許可。	2025 年 1 月 16 日
AWSConfigServiceRolePolicy – 新增 "organizations:ListAWSServiceAccessForOrganization"	此政策現在支援的其他許可AWS Organizations。	2024 年 12 月 18 日
AWS_ConfigRole – 新增 "app-integrations:GetApplication", "app-integrations:ListApplications", "app-integrations:ListTagsForResource", "appconfig:GetExtension", "appconfig:ListExtensions", "cloudtrail:GetInsightSelectors", "connect:DescribeQueue", "connect:DescribeRoutingProfile", "connect:DescribeSecurityProfile", "connect:ListQueueQuickConnects", "connect:ListQueues", "connect:ListRoutingProfileQueues", "connect:ListRoutingProfiles", "connect:ListSecurityProfileApplications", "connect:ListSecurityProfilePermissions", "connect:ListSecurityProfiles", "datazone:GetDomain", "datazone:ListDomains", "devops-guru:ListNotificationChannels", "glue:GetRegistry", "glue:ListRegistries", "identitystore:DescribeGroup", "identitystore:DescribeGroupMembership" "identitystore:ListGroupMemberships", "identitystore:ListGroups", "iot:DescribeThingGroup", "iot:DescribeThingType", "iot:ListThingGroups", "iot:ListThingTypes", "iotfleetwise:GetDecoderManifest", "iotfleetwise:GetFleet", "iotfleetwise:GetModelManifest", "iotfleetwise:GetSignalCatalog", "iotfleetwise:GetVehicle", "iotfleetwise:ListDecoderManifestNetworkInterfaces", "iotfleetwise:ListDecoderManifests", "iotfleetwise:ListDecoderManifestSignals", "iotfleetwise:ListFleets", "iotfleetwise:ListModelManifestNodes", "iotfleetwise:ListModelManifests", "iotfleetwise:ListSignalCatalogNodes", "iotfleetwise:ListSignalCatalogs", "iotfleetwise:ListTagsForResource", "iotfleetwise:ListVehicles", "iotwireless:GetDestination", "iotwireless:GetDeviceProfile", "iotwireless:GetWirelessGateway", "iotwireless:ListDestinations", "iotwireless:ListDeviceProfiles", "iotwireless:ListWirelessGateways", "ivschat:GetLoggingConfiguration", "ivschat:GetRoom" "ivschat:ListLoggingConfigurations", "ivschat:ListRooms", "ivschat:ListTagsForResource", "logs:GetLogAnomalyDetector", "logs:ListLogAnomalyDetectors", "oam:GetSink" "oam:GetSinkPolicy", "oam:ListSinks", "payment-cryptography:GetAlias", "payment-cryptography:GetKey", "payment-cryptography:ListAliases", "payment-cryptography:ListKeys", "payment-cryptography:ListTagsForResource", "rds:DescribeDBProxyTargetGroups", "rds:DescribeDBProxyTargets", "rekognition:DescribeProjects", "s3:GetStorageLensGroup", "s3:ListStorageLensGroups", "s3:ListTagsForResource", "scheduler:GetScheduleGroup", "scheduler:ListScheduleGroups", "scheduler:ListTagsForResource", "ssm:GetServiceSetting", "vpc-lattice:GetAccessLogSubscription", "vpc-lattice:GetService", "vpc-lattice:GetServiceNetwork", "vpc-lattice:GetTargetGroup", "vpc-lattice:ListAccessLogSubscriptions", "vpc-lattice:ListServiceNetworks", "vpc-lattice:ListServices", "vpc-lattice:ListTagsForResource", "vpc-lattice:ListTargetGroups", and "vpc-lattice:ListTargets"	此政策現在支援AWS AppConfig、AWS CloudTrail、Amazon Connect、Amazon DataZone、Amazon DevOpsGuru AWS Glue、Identity Store AWS IoT、AWS IoT FleetWise、AWS IoT Wireless、Amazon Interactive Video Service (Amazon IVS)、Amazon CloudWatch Logs、Amazon CloudWatch Observability Access Manager、AWS Payment Cryptography、Amazon Relational Database Service (Amazon RDS)、Amazon Rekognition、Amazon Simple Storage Service (Amazon S3)AWS Systems Manager、Amazon EventBridge Scheduler 和 Amazon VPC Lattice 的其他許可。	2024 年 11 月 7 日
AWSConfigServiceRolePolicy – 新增 "app-integrations:GetApplication", "app-integrations:ListApplications", "app-integrations:ListTagsForResource", "appconfig:GetExtension", "appconfig:ListExtensions", "cloudtrail:GetInsightSelectors", "connect:DescribeQueue", "connect:DescribeRoutingProfile", "connect:DescribeSecurityProfile", "connect:ListQueueQuickConnects", "connect:ListQueues", "connect:ListRoutingProfileQueues", "connect:ListRoutingProfiles", "connect:ListSecurityProfileApplications", "connect:ListSecurityProfilePermissions", "connect:ListSecurityProfiles", "datazone:GetDomain", "datazone:ListDomains", "devops-guru:ListNotificationChannels", "glue:GetRegistry", "glue:ListRegistries", "identitystore:DescribeGroup", "identitystore:DescribeGroupMembership" "identitystore:ListGroupMemberships", "identitystore:ListGroups", "iot:DescribeThingGroup", "iot:DescribeThingType", "iot:ListThingGroups", "iot:ListThingTypes", "iotfleetwise:GetDecoderManifest", "iotfleetwise:GetFleet", "iotfleetwise:GetModelManifest", "iotfleetwise:GetSignalCatalog", "iotfleetwise:GetVehicle", "iotfleetwise:ListDecoderManifestNetworkInterfaces", "iotfleetwise:ListDecoderManifests", "iotfleetwise:ListDecoderManifestSignals", "iotfleetwise:ListFleets", "iotfleetwise:ListModelManifestNodes", "iotfleetwise:ListModelManifests", "iotfleetwise:ListSignalCatalogNodes", "iotfleetwise:ListSignalCatalogs", "iotfleetwise:ListTagsForResource", "iotfleetwise:ListVehicles", "iotwireless:GetDestination", "iotwireless:GetDeviceProfile", "iotwireless:GetWirelessGateway", "iotwireless:ListDestinations", "iotwireless:ListDeviceProfiles", "iotwireless:ListWirelessGateways", "ivschat:GetLoggingConfiguration", "ivschat:GetRoom" "ivschat:ListLoggingConfigurations", "ivschat:ListRooms", "ivschat:ListTagsForResource", "logs:GetLogAnomalyDetector", "logs:ListLogAnomalyDetectors", "oam:GetSink" "oam:GetSinkPolicy", "oam:ListSinks", "payment-cryptography:GetAlias", "payment-cryptography:GetKey", "payment-cryptography:ListAliases", "payment-cryptography:ListKeys", "payment-cryptography:ListTagsForResource", "rds:DescribeDBProxyTargetGroups", "rds:DescribeDBProxyTargets", "rekognition:DescribeProjects", "s3:GetStorageLensGroup", "s3:ListStorageLensGroups", "s3:ListTagsForResource", "scheduler:GetScheduleGroup", "scheduler:ListScheduleGroups", "scheduler:ListTagsForResource", "ssm:GetServiceSetting", "vpc-lattice:GetAccessLogSubscription", "vpc-lattice:GetService", "vpc-lattice:GetServiceNetwork", "vpc-lattice:GetTargetGroup", "vpc-lattice:ListAccessLogSubscriptions", "vpc-lattice:ListServiceNetworks", "vpc-lattice:ListServices", "vpc-lattice:ListTagsForResource", "vpc-lattice:ListTargetGroups", and "vpc-lattice:ListTargets"	此政策現在支援AWS AppConfig、AWS CloudTrail、Amazon Connect、Amazon DataZone、Amazon DevOpsGuru AWS Glue、Identity Store AWS IoT、AWS IoT FleetWise、AWS IoT Wireless、Amazon Interactive Video Service (Amazon IVS)、Amazon CloudWatch Logs、Amazon CloudWatch Observability Access Manager、AWS Payment Cryptography、Amazon Relational Database Service (Amazon RDS)、Amazon Rekognition、Amazon Simple Storage Service (Amazon S3)AWS Systems Manager、Amazon EventBridge Scheduler 和 Amazon VPC Lattice 的其他許可。	2024 年 11 月 7 日
AWS_ConfigRole – 新增 "aoss:BatchGetCollection," "aoss:BatchGetLifecyclePolicy," "aoss:BatchGetVpcEndpoint," "aoss:GetAccessPolicy," "aoss:GetSecurityConfig," "aoss:GetSecurityPolicy," "aoss:ListAccessPolicies," "aoss:ListCollections," "aoss:ListLifecyclePolicies," "aoss:ListSecurityConfigs," "aoss:ListSecurityPolicies," "aoss:ListVpcEndpoints," "appstream:DescribeAppBlockBuilders," "backup:GetRestoreTestingPlan," "backup:GetRestoreTestingSelection", "backup:ListRestoreTestingPlans," "backup:ListRestoreTestingSelections," "cloudTrail:GetChannel, "cloudTrail:ListChannels," "glue:GetTrigger," "glue:ListTriggers, "imagebuilder:GetLifecyclePolicy," "imagebuilder:ListLifecyclePolicies," "iot:DescribeBillingGroup," "iot:ListBillingGroups," "ivs:GetEncoderConfiguration," "ivs:GetPlaybackRestrictionPolicy," "ivs:GetStage," "ivs:GetStorageConfiguration," "ivs:ListEncoderConfigurations," "ivs:ListPlaybackRestrictionPolicies," "ivs:ListStages," "ivs:ListStorageConfigurations," "mediaconnect:DescribeBridge", "mediaconnect:DescribeGatewa," "mediaconnect:ListBridges," "mediaconnect:ListGateways", "mediatailor:DescribeChannel," "mediatailor:DescribeLiveSource," "mediatailor:DescribeSourceLocation," "mediatailor:DescribeVodSource", "mediatailor:ListChannels," "mediatailor:ListLiveSources", "mediatailor:ListSourceLocations," "mediatailor:ListVodSources," "omics:GetWorkflow," "omics:ListWorkflows," "scheduler:GetSchedule," and "scheduler:ListSchedules"	此政策現在支援 Amazon OpenSearch Service Severless、Amazon AppStream AWS Backup、AWS CloudTrailAWS Glue、EC2 Image Builder AWS IoT、Amazon Interactive Video Service (Amazon IVS)AWS Elemental MediaConnectAWS Elemental MediaTailorAWS HealthOmics和 Amazon EventBridge Scheduler 的其他許可。	2024 年 9 月 16 日
AWSConfigServiceRolePolicy – 新增 "aoss:BatchGetCollection," "aoss:BatchGetLifecyclePolicy," "aoss:BatchGetVpcEndpoint," "aoss:GetAccessPolicy," "aoss:GetSecurityConfig," "aoss:GetSecurityPolicy," "aoss:ListAccessPolicies," "aoss:ListCollections," "aoss:ListLifecyclePolicies," "aoss:ListSecurityConfigs," "aoss:ListSecurityPolicies," "aoss:ListVpcEndpoints," "appstream:DescribeAppBlockBuilders," "backup:GetRestoreTestingPlan," "backup:GetRestoreTestingSelection", "backup:ListRestoreTestingPlans," "backup:ListRestoreTestingSelections," "cloudTrail:GetChannel, "cloudTrail:ListChannels," "glue:GetTrigger," "glue:ListTriggers, "imagebuilder:GetLifecyclePolicy," "imagebuilder:ListLifecyclePolicies," "iot:DescribeBillingGroup," "iot:ListBillingGroups," "ivs:GetEncoderConfiguration," "ivs:GetPlaybackRestrictionPolicy," "ivs:GetStage," "ivs:GetStorageConfiguration," "ivs:ListEncoderConfigurations," "ivs:ListPlaybackRestrictionPolicies," "ivs:ListStages," "ivs:ListStorageConfigurations," "mediaconnect:DescribeBridge", "mediaconnect:DescribeGatewa," "mediaconnect:ListBridges," "mediaconnect:ListGateways", "mediatailor:DescribeChannel," "mediatailor:DescribeLiveSource," "mediatailor:DescribeSourceLocation," "mediatailor:DescribeVodSource", "mediatailor:ListChannels," "mediatailor:ListLiveSources", "mediatailor:ListSourceLocations," "mediatailor:ListVodSources," "omics:GetWorkflow," "omics:ListWorkflows," "scheduler:GetSchedule," and "scheduler:ListSchedules"	此政策現在支援 Amazon OpenSearch Service Severless、Amazon AppStream AWS Backup、AWS CloudTrailAWS Glue、EC2 Image Builder AWS IoT、Amazon Interactive Video Service (Amazon IVS)AWS Elemental MediaConnectAWS Elemental MediaTailorAWS HealthOmics和 Amazon EventBridge Scheduler 的其他許可。	2024 年 9 月 16 日
AWS_ConfigRole – 新增 "elasticfilesystem:DescribeTags," "redshift:DescribeTags," and "ssm-sap:ListTagsForResource"	此政策現在支援 Amazon Elastic File System (Amazon EFS)、Amazon Redshift 和的其他許可適用於 SAP 的 AWS Systems Manager。	2024 年 6 月 17 日
AWSConfigServiceRolePolicy – 新增 "elasticfilesystem:DescribeTags," "redshift:DescribeTags," and "ssm-sap:ListTagsForResource"	此政策現在支援 Amazon Elastic File System (Amazon EFS)、Amazon Redshift 和的其他許可適用於 SAP 的 AWS Systems Manager。	2024 年 6 月 17 日
AWS_ConfigRole – 新增 "aps:DescribeAlertManagerDefinition," "cloudwatch:DescribeAlarmsForMetric," "cognito-identity:DescribeIdentityPool, "cognito-identity:GetPrincipalTagAttributeMap," "elasticache:DescribeCacheSecurityGroups," "elasticache:DescribeUserGroups," "elasticache:DescribeUsers," "elasticache:DescribeGlobalReplicationGroups," "fsx:DescribeDataRepositoryAssociations," "glue:GetDatabase," "glue:GetDatabases," "iam:ListUsers," "lambda:GetLayerVersion," "lambda:ListLayers," "lambda:ListLayerVersions," "ram:GetPermission," "ram:ListPermissionAssociations," "ram:ListPermissions," "ram:ListPermissionVersions," "redshift-serverless:GetNamespace," "redshift-serverless:GetWorkgroup," "redshift-serverless:ListNamespaces," "redshift-serverless:ListTagsForResource," "redshift-serverless:ListWorkgroups," "sagemaker:DescribeInferenceExperiment," "sagemaker:ListInferenceExperiments," and "sns:GetSMSSandboxAccountStatus"	此政策現在支援 Amazon Managed Service for Prometheus、Amazon CloudWatch、Amazon Cognito、Amazon ElastiCache、Amazon FSx、AWS Glue、AWS Identity and Access Management(IAM)AWS Lambda、、AWS RAM、Amazon Redshift Serverless、Amazon SageMaker AI 和 Amazon Simple Notification Service (Amazon SNS) 的其他許可。	2024 年 2 月 22 日
AWSConfigServiceRolePolicy – 新增 "aps:DescribeAlertManagerDefinition," "cloudwatch:DescribeAlarmsForMetric," "cognito-identity:DescribeIdentityPool, "cognito-identity:GetPrincipalTagAttributeMap," "elasticache:DescribeCacheSecurityGroups," "elasticache:DescribeUserGroups," "elasticache:DescribeUsers," "elasticache:DescribeGlobalReplicationGroups," "fsx:DescribeDataRepositoryAssociations," "glue:GetDatabase," "glue:GetDatabases," "iam:ListUsers," "lambda:GetLayerVersion," "lambda:ListLayers," "lambda:ListLayerVersions," "ram:GetPermission," "ram:ListPermissionAssociations," "ram:ListPermissions," "ram:ListPermissionVersions," "redshift-serverless:GetNamespace," "redshift-serverless:GetWorkgroup," "redshift-serverless:ListNamespaces," "redshift-serverless:ListTagsForResource," "redshift-serverless:ListWorkgroups," "sagemaker:DescribeInferenceExperiment," "sagemaker:ListInferenceExperiments," and "sns:GetSMSSandboxAccountStatus"	此政策現在支援 Amazon Managed Service for Prometheus、Amazon CloudWatch、Amazon Cognito、Amazon ElastiCache、Amazon FSx、AWS Glue、AWS Identity and Access Management(IAM)AWS Lambda、、AWS RAM、Amazon Redshift Serverless、Amazon SageMaker AI 和 Amazon Simple Notification Service (Amazon SNS) 的其他許可。	2024 年 2 月 22 日
AWSConfigUserAccess –AWS Config開始追蹤此AWS受管政策的變更	此政策提供使用的存取權AWS Config，包括依資源上的標籤搜尋和讀取所有標籤。這不提供設定的許可AWS Config，這需要管理權限。	2024 年 2 月 22 日
AWS_ConfigRole – 新增 "appconfig:GetExtensionAssociation," "appconfig:ListExtensionAssociations," "aps:DescribeLoggingConfiguration," "dms:DescribeReplicationTaskAssessmentRuns," "iam:GetOpenIDConnectProvider," "iam:ListOpenIDConnectProviders," "kafka:DescribeVpcConnection," "kafka:GetClusterPolicy," "kafka:ListVpcConnections," "logs:DescribeMetricFilters," "organizations:ListDelegatedAdministrators," "s3:GetBucketPolicyStatus," "s3express:GetBucketPolicy," and "s3express:ListAllMyDirectoryBuckets"	此政策現在支援 Amazon Managed Service for Prometheus AWS AppConfig、AWS Database Migration Service(AWS DMS)、(AWS Identity and Access Management) IAM、Amazon Managed Streaming for Apache Kafka (Amazon MSK)AWS Organizations、Amazon CloudWatch Logs 和 Amazon Simple Storage Service (Amazon S3) 的其他許可。	2023 年 12 月 5 日
AWSConfigServiceRolePolicy – 新增 "appconfig:GetExtensionAssociation," "appconfig:ListExtensionAssociations," "aps:DescribeLoggingConfiguration," "dms:DescribeReplicationTaskAssessmentRuns," "iam:GetOpenIDConnectProvider," "iam:ListOpenIDConnectProviders," "kafka:DescribeVpcConnection," "kafka:GetClusterPolicy," "kafka:ListVpcConnections," "logs:DescribeMetricFilters," "organizations:ListDelegatedAdministrators," "s3:GetBucketPolicyStatus," "s3express:GetBucketPolicy," and "s3express:ListAllMyDirectoryBuckets"	此政策現在支援 Amazon Managed Service for Prometheus AWS AppConfig、AWS Database Migration Service(AWS DMS)、(AWS Identity and Access Management) IAM、Amazon Managed Streaming for Apache Kafka (Amazon MSK)AWS Organizations、Amazon CloudWatch Logs 和 Amazon Simple Storage Service (Amazon S3) 的其他許可。	2023 年 12 月 5 日
AWS_ConfigRole – 新增 "backup:DescribeProtectedResource," "cognito-identity:GetIdentityPoolRoles," "cognito-identity:ListIdentityPools," "cognito-identity:ListTagsForResource," "cognito-idp:DescribeIdentityProvider," "cognito-idp:DescribeResourceServer," "cognito-idp:DescribeUserPool," "cognito-idp:DescribeUserPoolClient," "cognito-idp:DescribeUserPoolDomain," "cognito-idp:GetGroup," "cognito-idp:GetUserPoolMfaConfig," "cognito-idp:ListGroups," "cognito-idp:ListIdentityProviders," "cognito-idp:ListResourceServers," "cognito-idp:ListUserPoolClients," "cognito-idp:ListUserPools," "cognito-idp:ListTagsForResource," "connect:DescribeEvaluationForm," "connect:DescribeInstanceStorageConfig," "connect:DescribePrompt," "connect:DescribeRule," "connect:DescribeUser," "connect:GetTaskTemplate," "connect:ListApprovedOrigins," "connect:ListEvaluationForms," "connect:ListInstanceStorageConfigs," "connect:ListIntegrationAssociations," "connect:ListPrompts," "connect:ListRules," "connect:ListSecurityKeys," "connect:ListTagsForResource," "connect:ListTaskTemplates," "connect:ListUsers," "emr-containers:DescribeVirtualCluster," "emr-containers:ListVirtualClusters," "emr-serverless:GetApplication," "emr-serverless:ListApplications," "groundstation:GetDataflowEndpointGroup," "groundstation:ListDataflowEndpointGroups," "m2:GetEnvironment," "m2:ListEnvironments," "m2:ListTagsForResource," "memorydb:DescribeAcls," "memorydb:DescribeClusters," "memorydb:DescribeParameterGroups," "memorydb:DescribeParameters," "memorydb:DescribeSubnetGroups," "organizations:ListRoots," "quicksight:DescribeAccountSubscription," "quicksight:DescribeDataSetRefreshProperties," "rds:DescribeEngineDefaultClusterParameters," "redshift:DescribeEndpointAccess," "redshift:DescribeEndpointAuthorization," "route53:GetChange," "route53:ListCidrBlocks," "route53:ListCidrLocations," "serviceCatalog:DescribePortfolioShares," "transfer:DescribeProfile," and "transfer:ListProfiles"	此政策現在支援 Amazon Cognito、Amazon Connect、Amazon EMR、AWS Ground StationAWS Mainframe Modernization、Amazon MemoryDB AWS Organizations、Amazon Quick Suite、Amazon Relational Database Service (Amazon RDS)AWS Service Catalog、Amazon Redshift、Amazon Route 53 和的其他許可AWS Transfer Family。	2023 年 11 月 17 日
AWS_ConfigRole – 新增 "Sid": "AWSConfigServiceRolePolicyStatementID," "Sid": "AWSConfigSLRLogStatementID," "Sid": "AWSConfigSLRLogEventStatementID," and "Sid": "AWSConfigSLRApiGatewayStatementID"	此政策現在會新增`AWSConfigServiceRolePolicyStatementID`、`AWSConfigSLRLogStatementID`、`AWSConfigSLRLogEventStatementID`和 `AWSConfigSLRApiGatewayStatementID` 的安全性識別碼 (SID)。	2023 年 11 月 17 日
AWSConfigServiceRolePolicy – 新增 "backup:DescribeProtectedResource," "cognito-identity:GetIdentityPoolRoles," "cognito-identity:ListIdentityPools," "cognito-identity:ListTagsForResource," "cognito-idp:DescribeIdentityProvider," "cognito-idp:DescribeResourceServer," "cognito-idp:DescribeUserPool," "cognito-idp:DescribeUserPoolClient," "cognito-idp:DescribeUserPoolDomain," "cognito-idp:GetGroup," "cognito-idp:GetUserPoolMfaConfig," "cognito-idp:ListGroups," "cognito-idp:ListIdentityProviders," "cognito-idp:ListResourceServers," "cognito-idp:ListUserPoolClients," "cognito-idp:ListUserPools," "cognito-idp:ListTagsForResource," "connect:DescribeEvaluationForm," "connect:DescribeInstanceStorageConfig," "connect:DescribePrompt," "connect:DescribeRule," "connect:DescribeUser," "connect:GetTaskTemplate," "connect:ListApprovedOrigins," "connect:ListEvaluationForms," "connect:ListInstanceStorageConfigs," "connect:ListIntegrationAssociations," "connect:ListPrompts," "connect:ListRules," "connect:ListSecurityKeys," "connect:ListTagsForResource," "connect:ListTaskTemplates," "connect:ListUsers," "emr-containers:DescribeVirtualCluster," "emr-containers:ListVirtualClusters," "emr-serverless:GetApplication," "emr-serverless:ListApplications," "groundstation:GetDataflowEndpointGroup," "groundstation:ListDataflowEndpointGroups," "m2:GetEnvironment," "m2:ListEnvironments," "m2:ListTagsForResource," "memorydb:DescribeAcls," "memorydb:DescribeClusters," "memorydb:DescribeParameterGroups," "memorydb:DescribeParameters," "memorydb:DescribeSubnetGroups," "organizations:ListRoots," "quicksight:DescribeAccountSubscription," "quicksight:DescribeDataSetRefreshProperties," "rds:DescribeEngineDefaultClusterParameters," "redshift:DescribeEndpointAccess," "redshift:DescribeEndpointAuthorization," "route53:GetChange," "route53:ListCidrBlocks," "route53:ListCidrLocations," "serviceCatalog:DescribePortfolioShares," "transfer:DescribeProfile," and "transfer:ListProfiles"	此政策現在支援 Amazon Cognito、Amazon Connect、Amazon EMR、AWS Ground StationAWS Mainframe Modernization、Amazon MemoryDB AWS Organizations、Amazon Quick Suite、Amazon Relational Database Service (Amazon RDS)AWS Service Catalog、Amazon Redshift、Amazon Route 53 和的其他許可AWS Transfer Family。	2023 年 11 月 17 日
AWSConfigServiceRolePolicy – 新增 "Sid": "AWSConfigServiceRolePolicyStatementID," "Sid": "AWSConfigSLRLogStatementID," "Sid": "AWSConfigSLRLogEventStatementID," and "Sid": "AWSConfigSLRApiGatewayStatementID"	此政策現在會新增`AWSConfigServiceRolePolicyStatementID`、`AWSConfigSLRLogStatementID`、`AWSConfigSLRLogEventStatementID`和 `AWSConfigSLRApiGatewayStatementID` 的安全性識別碼 (SID)。	2023 年 11 月 17 日
AWS_ConfigRole – 新增 "acm-pca:GetCertificateAuthorityCertificate," "appmesh:DescribeMesh," "appmesh:ListGatewayRoutes," "connect:DescribeInstance," "connect:DescribeQuickConnect," "connect:ListQuickConnects," "ecs:DescribeCapacityProviders," "evidently:GetSegment," "evidently:ListSegments," "grafana:DescribeWorkspace," "grafana:DescribeWorkspaceAuthentication," "grafana:DescribeWorkspaceConfiguration," "grafana:DescribeWorkspaceConfiguration," "guardduty:GetMemberDetectors," "inspector2:BatchGetAccountStatus," "inspector2:GetDelegatedAdminAccount," "inspector2:ListMembers," "iot:DescribeCACertificate," "iot:ListCACertificates," "iot:ListTagsForResource," "iottwinmaker:GetSyncJob," "iottwinmaker:ListSyncJobs," "kafka:ListTagsForResource," "kafkaconnect:DescribeConnector," "kafkaconnect:ListConnectors," "lambda:GetCodeSigningConfig," "lambda:ListCodeSigningConfigs," "lambda:ListTags," "networkmanager:GetConnectPeer," "organizations:DescribeOrganization," "organizations:ListTargetsForPolicy," "sagemaker:DescribeDataQualityJob," "sagemaker:DescribeModelExplainabilityJob," "sagemaker:ListDataQualityJob," and "sagemaker:ExplainabilityJob"	此政策現在支援AWS 私有 CA、AWS App Mesh、Amazon Connect、Amazon Elastic Container Service (Amazon ECS)、Amazon CloudWatch Evidently、Amazon Managed Grafana、Amazon GuardDuty、Amazon Inspector AWS IoTAWS IoT TwinMaker、Amazon Managed Streaming for Apache Kafka (Amazon MSK)AWS LambdaAWS Network ManagerAWS Organizations、、和 Amazon SageMaker AI 的其他許可。	2023 年 10 月 4 日
AWSConfigServiceRolePolicy – 新增 "acm-pca:GetCertificateAuthorityCertificate," "appmesh:DescribeMesh," "appmesh:ListGatewayRoutes," "connect:DescribeInstance," "connect:DescribeQuickConnect," "connect:ListQuickConnects," "ecs:DescribeCapacityProviders," "evidently:GetSegment," "evidently:ListSegments," "grafana:DescribeWorkspace," "grafana:DescribeWorkspaceAuthentication," "grafana:DescribeWorkspaceConfiguration," "grafana:DescribeWorkspaceConfiguration," "guardduty:GetMemberDetectors," "inspector2:BatchGetAccountStatus," "inspector2:GetDelegatedAdminAccount," "inspector2:ListMembers," "iot:DescribeCACertificate," "iot:ListCACertificates," "iot:ListTagsForResource," "iottwinmaker:GetSyncJob," "iottwinmaker:ListSyncJobs," "kafka:ListTagsForResource," "kafkaconnect:DescribeConnector," "kafkaconnect:ListConnectors," "lambda:GetCodeSigningConfig," "lambda:ListCodeSigningConfigs," "lambda:ListTags," "networkmanager:GetConnectPeer," "organizations:DescribeOrganization," "organizations:ListTargetsForPolicy," "sagemaker:DescribeDataQualityJob," "sagemaker:DescribeModelExplainabilityJob," "sagemaker:ListDataQualityJob," and "sagemaker:ExplainabilityJob"	此政策現在支援AWS 私有 CA、AWS App Mesh、Amazon Connect、Amazon Elastic Container Service (Amazon ECS)、Amazon CloudWatch Evidently、Amazon Managed Grafana、Amazon GuardDuty、Amazon Inspector AWS IoTAWS IoT TwinMaker、Amazon Managed Streaming for Apache Kafka (Amazon MSK)AWS LambdaAWS Network ManagerAWS Organizations、、和 Amazon SageMaker AI 的其他許可。	2023 年 10 月 4 日
AWSConfigServiceRolePolicy – 移除 "ssm:GetParameter"	此政策現在會移除AWS Systems Manager(Systems Manager) 的許可。	2023 年 9 月 6 日
AWS_ConfigRole – 新增 "appmesh:DescribeGatewayRoute","appstream:DescribeStacks", "aps:ListTagsForResource", "cloudfront:GetFunction", "cloudfront:GetOriginAccessControl", "cloudfront:ListFunctions", "cloudfront:ListOriginAccessControls", "codeartifact:ListPackages", "codeartifact:ListPackageVersions", "codebuild:BatchGetReportGroups", "codebuild:ListReportGroups", "connect:ListInstanceAttributes", "connect:ListInstances", "glue:GetPartition", "glue:GetPartitions", "guardduty:GetAdministratorAccount", "iam:ListInstanceProfileTags", "inspector2:ListFilters", "iot:DescribeJobTemplate", "iot:DescribeProvisioningTemplate", "iot:ListJobTemplates", "iot:ListProvisioningTemplates", "iottwinmaker:GetComponentType", "iottwinmaker:ListComponentTypes", "iotwireless:GetFuotaTask", "iotwireless:GetMulticastGroup", "iotwireless:ListFuotaTasks", "iotwireless:ListMulticastGroups", "kafka:ListScramSecrets", "macie2:ListTagsForResource", "mediaconnect:ListTagsForResource", "networkmanager:GetConnectPeer", "networkmanager:ListConnectPeers", "organizations:DescribeEffectivePolicy", "organizations:DescribeResourcePolicy", "resource-explorer-2:GetIndex", "resource-explorer-2:ListIndexes", "resource-explorer-2:ListTagsForResource", "route53:ListCidrCollections", "s3:GetMultiRegionAccessPointPolicy", "s3:GetMultiRegionAccessPointPolicyStatus", and "sns:GetDataProtectionPolicy"	此政策現在支援AWS App Mesh、AWS CloudFormation、Amazon CloudFront AWS CodeArtifactAWS CodeBuild、Amazon Connect AWS Glue、Amazon GuardDuty、AWS Identity and Access Management(IAM)、Amazon Inspector、AWS IoTAWS IoT TwinMaker、AWS IoT Wireless、、Amazon Managed Streaming for Apache Kafka、Amazon Macie AWS Elemental MediaConnect、AWS Network Manager、AWS Organizations、AWS 資源總管、Amazon Route 53、Amazon Simple Storage Service (Amazon S3) 和 Amazon Simple Notification Service (Amazon SNS) 的其他許可。	2023 年 7 月 28 日
AWSConfigServiceRolePolicy – 新增 "appmesh:DescribeGatewayRoute", "appstream:DescribeStacks", "aps:ListTagsForResource", "cloudfront:GetFunction", "cloudfront:GetOriginAccessControl", "cloudfront:ListFunctions", "cloudfront:ListOriginAccessControls", "codeartifact:ListPackages", "codeartifact:ListPackageVersions", "codebuild:BatchGetReportGroups", "codebuild:ListReportGroups", "connect:ListInstanceAttributes", "connect:ListInstances", "glue:GetPartition", "glue:GetPartitions", "guardduty:GetAdministratorAccount", "iam:ListInstanceProfileTags", "inspector2:ListFilters", "iot:DescribeJobTemplate", "iot:DescribeProvisioningTemplate", "iot:ListJobTemplates", "iot:ListProvisioningTemplates", "iottwinmaker:GetComponentType", "iottwinmaker:ListComponentTypes", "iotwireless:GetFuotaTask", "iotwireless:GetMulticastGroup", "iotwireless:ListFuotaTasks", "iotwireless:ListMulticastGroups", "kafka:ListScramSecrets", "macie2:ListTagsForResource", "mediaconnect:ListTagsForResource", "networkmanager:GetConnectPeer", "networkmanager:ListConnectPeers", "organizations:DescribeEffectivePolicy", "organizations:DescribeResourcePolicy", "resource-explorer-2:GetIndex", "resource-explorer-2:ListIndexes", "resource-explorer-2:ListTagsForResource", "route53:ListCidrCollections", "s3:GetMultiRegionAccessPointPolicy", "s3:GetMultiRegionAccessPointPolicyStatus", "sns:GetDataProtectionPolicy", "ssm:DescribeParameters", "ssm:GetParameter", and "ssm:ListTagsForResource"	此政策現在支援AWS App Mesh Amazon WorkSpaces 應用程式、AWS CloudFormation、Amazon CloudFront、AWS CodeArtifactAWS CodeBuild、Amazon Connect、AWS Glue、Amazon GuardDuty、AWS Identity and Access Management(IAM)、Amazon Inspector AWS IoT、AWS IoT TwinMaker、AWS IoT Wireless、Amazon Managed Streaming for Apache Kafka、Amazon Macie、AWS Elemental MediaConnect、AWS Network Manager、AWS OrganizationsAWS 資源總管、、Amazon Route 53、Amazon Simple Storage Service (Amazon S3)、Amazon Simple Notification Service (Amazon SNS) 和 Amazon EC2 Systems Manager (SSM) 的其他許可。	2023 年 7 月 28 日
AWS_ConfigRole – 新增 "amplify:GetBranch", "amplify:ListBranches", "app-integrations:GetEventIntegration", "app-integrations:ListEventIntegrationAssociations", "app-integrations:ListEventIntegrations", "appmesh:DescribeRoute", "appmesh:ListRoutes", "aps:ListRuleGroupsNamespaces", "athena:GetPreparedStatement", "athena:ListPreparedStatements", "batch:DescribeSchedulingPolicies", "batch:ListSchedulingPolicies", "cloudformation:ListTypes", "cloudtrail:ListTrails", "codeartifact:ListDomains", "codeguru-profiler:DescribeProfilingGroup", "codeguru-profiler:GetNotificationConfiguration", "codeguru-profiler:GetPolicy", "codeguru-profiler:ListProfilingGroups", "ds:DescribeDomainControllers", “dynamodb:DescribeTableReplicaAutoScaling" "dynamodb:DescribeTimeToLive", "ec2:DescribeTrafficMirrorFilters", "evidently:GetLaunch", "evidently:ListLaunches", "forecast:DescribeDatasetGroup", "forecast:ListDatasetGroups", "greengrass:DescribeComponent", "greengrass:GetComponent", "greengrass:ListComponents", "greengrass:ListComponentVersions", "groundstation:GetMissionProfile", "groundstation:ListMissionProfiles", "iam:ListGroups", "iam:ListRoles", "kafka:DescribeConfiguration", "kafka:DescribeConfigurationRevision", "kafka:ListConfigurations", "lightsail:GetRelationalDatabases" "logs:ListTagsLogGroup", "mediaconnect:DescribeFlow", "mediaconnect:ListFlows", "mediatailor:GetPlaybackConfiguration", "mediatailor:ListPlaybackConfigurations", "mobiletargeting:GetApplicationSettings", "mobiletargeting:GetEmailTemplate", "mobiletargeting:GetEventStream", "mobiletargeting:ListTemplates", "networkmanager:GetCustomerGatewayAssociations", "networkmanager:GetLinkAssociations", "organizations:DescribeAccount", "organizations:DescribeOrganizationalUnit", "organizations:ListAccounts", "organizations:ListAccountsForParent", "organizations:ListOrganizationalUnitsForParent", "organizations:ListTagsForResource", "personalize:DescribeDataset", "personalize:DescribeDatasetGroup", "personalize:DescribeSchema", "personalize:DescribeSolution", "personalize:ListDatasetGroups", "personalize:ListDatasetImportJobs", "personalize:ListDatasets", "personalize:ListSchemas", "personalize:ListSolutions", "personalize:ListTagsForResource", "quicksight:ListTemplates", "refactor-spaces:GetEnvironment", "refactor-spaces:GetService", "refactor-spaces:ListApplications", "refactor-spaces:ListEnvironments", "refactor-spaces:ListServices", "s3:GetAccessPointPolicyStatusForObjectLambda", "sagemaker:DescribeDeviceFleet", "sagemaker:DescribeFeatureGroup", "sagemaker:ListDeviceFleets", "sagemaker:ListFeatureGroups", "sagemaker:ListModels", and "transfer:ListTagsForResource"	此政策現在支援的其他許可AWS Amplify， Amazon Connect AWS App Mesh、 Amazon Managed Service for Prometheus、 Amazon Athena、AWS BatchAWS CloudFormation、AWS CloudTrail、AWS CodeArtifact、 Amazon CodeGuru AWS Directory Service、 Amazon DynamoDB、 Amazon Elastic Compute Cloud (Amazon EC2)， Amazon CloudWatch Evidently AWS Organizations、 Amazon Forecast、AWS IoT Greengrass、AWS Ground Station、AWS Identity and Access Management(IAM)、 Amazon Managed Streaming for Apache Kafka (Amazon MSK)、Amazon Lightsail、 Amazon CloudWatch Logs AWS Elemental MediaConnect、AWS Elemental MediaTailor、 Amazon Pinpoint、 Amazon Virtual Private Cloud (Amazon VPC)、 Amazon Personalize、 Amazon Quick Suite AWS Migration Hub Refactor Spaces、 Amazon Simple Storage Service (Amazon S3)、 Amazon SageMaker AI、AWS Transfer Family。	2023 年 6 月 13 日
AWSConfigServiceRolePolicy – 新增 "amplify:GetBranch", "amplify:ListBranches", "app-integrations:GetEventIntegration", "app-integrations:ListEventIntegrationAssociations", "app-integrations:ListEventIntegrations", "appmesh:DescribeRoute", "appmesh:ListRoutes", "aps:ListRuleGroupsNamespaces", "athena:GetPreparedStatement", "athena:ListPreparedStatements", "batch:DescribeSchedulingPolicies", "batch:ListSchedulingPolicies", "cloudformation:ListTypes", "cloudtrail:ListTrails", "codeartifact:ListDomains", "codeguru-profiler:DescribeProfilingGroup", "codeguru-profiler:GetNotificationConfiguration", "codeguru-profiler:GetPolicy", "codeguru-profiler:ListProfilingGroups", "ds:DescribeDomainControllers", "dynamodb:DescribeTableReplicaAutoScaling", "dynamodb:DescribeTimeToLive", "ec2:DescribeTrafficMirrorFilters", "evidently:GetLaunch", "evidently:ListLaunches", "forecast:DescribeDatasetGroup", "forecast:ListDatasetGroups", "greengrass:DescribeComponent", "greengrass:GetComponent", "greengrass:ListComponents", "greengrass:ListComponentVersions", "groundstation:GetMissionProfile", "groundstation:ListMissionProfiles", "iam:ListGroups", "iam:ListRoles", "kafka:DescribeConfiguration", "kafka:DescribeConfigurationRevision", "kafka:ListConfigurations", "lightsail:GetRelationalDatabases", "logs:ListTagsLogGroup", "mediaconnect:DescribeFlow", "mediaconnect:ListFlows", "mediatailor:GetPlaybackConfiguration", "mediatailor:ListPlaybackConfigurations", "mobiletargeting:GetApplicationSettings", "mobiletargeting:GetEmailTemplate", "mobiletargeting:GetEventStream", "mobiletargeting:ListTemplates", "networkmanager:GetCustomerGatewayAssociations", "networkmanager:GetLinkAssociations", "organizations:DescribeAccount", "organizations:DescribeOrganizationalUnit", "organizations:ListAccounts", "organizations:ListAccountsForParent", "organizations:ListOrganizationalUnitsForParent", "organizations:ListTagsForResource", "personalize:DescribeDataset", "personalize:DescribeDatasetGroup", "personalize:DescribeSchema", "personalize:DescribeSolution", "personalize:ListDatasetGroups", "personalize:ListDatasetImportJobs", "personalize:ListDatasets", "personalize:ListSchemas", "personalize:ListSolutions", "personalize:ListTagsForResource", "quicksight:ListTemplates", "refactor-spaces:GetEnvironment", "refactor-spaces:GetService", "refactor-spaces:ListApplications", "refactor-spaces:ListEnvironments", "refactor-spaces:ListServices", "s3:GetAccessPointPolicyStatusForObjectLambda", "sagemaker:DescribeDeviceFleet", "sagemaker:DescribeFeatureGroup", "sagemaker:ListDeviceFleets", "sagemaker:ListFeatureGroups", "sagemaker:ListModels", and "transfer:ListTagsForResource"	此政策現在支援的其他許可AWS Amplify， Amazon Connect AWS App Mesh、 Amazon Managed Service for Prometheus、 Amazon Athena、AWS BatchAWS CloudFormation、AWS CloudTrail、AWS CodeArtifact、 Amazon CodeGuru AWS Directory Service、 Amazon DynamoDB、 Amazon Elastic Compute Cloud (Amazon EC2)， Amazon CloudWatch Evidently AWS Organizations、Amazon Forecast、AWS IoT Greengrass、AWS Ground Station、AWS Identity and Access Management(IAM)、 Amazon Managed Streaming for Apache Kafka (Amazon MSK)、Amazon Lightsail、 Amazon CloudWatch Logs AWS Elemental MediaConnect、AWS Elemental MediaTailor、 Amazon Pinpoint、 Amazon Virtual Private Cloud (Amazon VPC)、 Amazon Personalize、 Amazon Quick Suite AWS Migration Hub Refactor Spaces、 Amazon Simple Storage Service (Amazon S3)、 Amazon SageMaker AI、AWS Transfer Family。	2023 年 6 月 13 日
AWSConfigServiceRolePolicy – 新增 amplify:GetApp, amplify:ListApps, appmesh:DescribeVirtualGateway, appmesh:DescribeVirtualNode, appmesh:DescribeVirtualRouter, appmesh:DescribeVirtualService, appmesh:ListMeshes, appmesh:ListTagsForResource, appmesh:ListVirtualGateways, appmesh:ListVirtualNodes, appmesh:ListVirtualRouters, appmesh:ListVirtualServices, apprunner:DescribeVpcConnector, apprunner:ListVpcConnectors, cloudformation:ListTypes, cloudfront:ListResponseHeadersPolicies, codeartifact:ListRepositories, ds:DescribeEventTopics, ds:ListLogSubscriptions, GetInstanceTypesFromInstanceRequirement ec2:GetManagedPrefixListEntries, kendra:DescribeIndex, kendra:ListIndices, kendra:ListTagsForResource, logs:DescribeDestinations, logs:GetDataProtectionPolicy, macie2:DescribeOrganizationConfiguration, macie2:GetAutomatedDiscoveryConfiguration, macie2:GetClassificationExportConfiguration, macie2:GetCustomDataIdentifier, macie2:GetFindingsPublicationConfiguration, macie2:ListCustomDataIdentifiers, mobiletargeting:GetEmailChannel, refactor-spaces:GetEnvironment, refactor-spaces:ListEnvironments, resiliencehub:ListTagsForResource, route53:GetDNSSEC, sagemaker:DescribeDomain, sagemaker:DescribeModelBiasJobDefinition, sagemaker:DescribeModelQualityJobDefinition, sagemaker:DescribePipeline, sagemaker:DescribeProject, sagemaker:ListDomains, sagemaker:ListModelBiasJobDefinitions, sagemaker:ListModelQualityJobDefinitions, sagemaker:ListPipelines, sagemaker:ListProjects, transfer:DescribeAgreement, transfer:DescribeCertificate, transfer:ListAgreements, transfer:ListCertificates, and waf-regional:ListLoggingConfigurations	此政策現在支援適用於AWS App Mesh、AWS App Runner、Amazon CloudFront、AWS CodeArtifact、Amazon Elastic Compute Cloud、Amazon Kendra AWS Amplify、Amazon Macie、Amazon Route 53、Amazon SageMaker AI、AWS Transfer Family、Amazon Pinpoint AWS Migration Hub、AWS Resilience Hub、Amazon CloudWatch、AWS Directory Service 和的 Amazon Managed Workflows 額外許可AWS WAF。	2023 年 4 月 13 日
AWS_ConfigRole – 新增 amplify:GetApp, amplify:ListApps, appmesh:DescribeVirtualGateway, appmesh:DescribeVirtualNode, appmesh:DescribeVirtualRouter, appmesh:DescribeVirtualService, appmesh:ListMeshes, appmesh:ListTagsForResource, appmesh:ListVirtualGateways, appmesh:ListVirtualNodes, appmesh:ListVirtualRouters, appmesh:ListVirtualServices, apprunner:DescribeVpcConnector, apprunner:ListVpcConnectors, cloudformation:ListTypes, cloudfront:ListResponseHeadersPolicies, codeartifact:ListRepositories, ds:DescribeEventTopics, ds:ListLogSubscriptions, ec2:GetInstanceTypesFromInstanceRequirement, ec2:GetManagedPrefixListEntries, kendra:DescribeIndex, kendra:ListIndices, kendra:ListTagsForResource, logs:DescribeDestinations, logs:GetDataProtectionPolicy, macie2:DescribeOrganizationConfiguration, macie2:GetAutomatedDiscoveryConfiguration, macie2:GetClassificationExportConfiguration, macie2:GetCustomDataIdentifier, macie2:GetFindingsPublicationConfiguration, macie2:ListCustomDataIdentifiers, mobiletargeting:GetEmailChannel, refactor-spaces:GetEnvironment, refactor-spaces:ListEnvironments, resiliencehub:ListTagsForResource, route53:GetDNSSEC, sagemaker:DescribeDomain, sagemaker:DescribeModelBiasJobDefinition, sagemaker:DescribeModelQualityJobDefinition, sagemaker:DescribePipeline, sagemaker:DescribeProject, sagemaker:ListDomains, sagemaker:ListModelBiasJobDefinitions, sagemaker:ListModelQualityJobDefinitions, sagemaker:ListPipelines, sagemaker:ListProjects, transfer:DescribeAgreement, transfer:DescribeCertificate, transfer:ListAgreements, transfer:ListCertificates, and waf-regional:ListLoggingConfigurations	此政策現在支援適用於AWS App Mesh、AWS App Runner、Amazon CloudFront、AWS CodeArtifact、Amazon Elastic Compute Cloud、Amazon Kendra AWS Amplify、Amazon Macie、Amazon Route 53、Amazon SageMaker AI、AWS Transfer Family、Amazon Pinpoint AWS Migration Hub、AWS Resilience Hub、Amazon CloudWatch、AWS Directory Service 和的 Amazon Managed Workflows 額外許可AWS WAF。	2023 年 4 月 13 日
AWSConfigServiceRolePolicy – 新增 appflow:DescribeFlow, appflow:ListFlows, appflow:ListTagsForResource, apprunner:DescribeService, apprunner:ListServices, apprunner:ListTagsForResource, appstream:DescribeApplications, appstream:DescribeFleets, cloudfront:GetResponseHeadersPolicy, cloudwatch:ListTagsForResource, codeartifact:DescribeRepository, codeartifact:GetRepositoryPermissionsPolicy, codeartifact:ListTagsForResource, codecommit:GetRepository, codecommit:GetRepositoryTriggers, codecommit:ListRepositories, codecommit:ListTagsForResource, devicefarm:GetInstanceProfile, devicefarm:ListInstanceProfiles, devicefarm:ListProjects, evidently:GetProject, evidently:ListProjects, evidently:ListTagsForResource, forecast:DescribeDataset, forecast:ListDatasets, forecast:ListTagsForResource, groundstation:GetConfig, groundstation:ListConfigs, groundstation:ListTagsForResource, iam:GetInstanceProfile, iam:GetSAMLProvider, iam:GetServerCertificate, iam:ListAccessKeys, iam:ListGroups, iam:ListInstanceProfiles, iam:ListMFADevices, iam:ListMFADeviceTags, iam:ListRoles, iam:ListSAMLProviders, iot:DescribeFleetMetric, iot:ListFleetMetrics, memorydb:DescribeUsers, memorydb:ListTags, mobiletargeting:GetApp, mobiletargeting:GetCampaigns, networkmanager:GetDevices, networkmanager:GetLinks, networkmanager:GetSites, panorama:ListNodes, rds:DescribeDBProxyEndpoints, redshift:DescribeScheduledActions, sagemaker:DescribeAppImageConfig, sagemaker:DescribeImage, sagemaker:DescribeImageVersion, sagemaker:ListAppImageConfigs, sagemaker:ListImages, and sagemaker:ListImageVersions	此政策現在支援 Amazon AppFlow AWS App Runner、Amazon WorkSpaces 應用程式、Amazon CloudFront、Amazon CloudWatch、AWS CodeArtifact、AWS CodeCommitAWS Device Farm、Amazon CloudWatch Evidently、Amazon Forecast、AWS Ground Station、AWS Identity and Access Management(IAM)AWS IoT、Amazon MemoryDB、Amazon Pinpoint AWS Network Manager、AWS Panorama、Amazon Relational Database Service (Amazon RDS)、Amazon Redshift 和 Amazon SageMaker AI 的其他許可。	2023 年 3 月 30 日
AWS_ConfigRole – 新增 appflow:DescribeFlow, appflow:ListFlows, appflow:ListTagsForResource, apprunner:DescribeService, apprunner:ListServices, apprunner:ListTagsForResource, appstream:DescribeApplications, appstream:DescribeFleets, cloudformation:ListTypes, cloudfront:GetResponseHeadersPolicy, cloudfront:ListDistributions, cloudwatch:ListTagsForResource, codeartifact:DescribeRepository, codeartifact:GetRepositoryPermissionsPolicy, codeartifact:ListTagsForResource, codecommit:GetRepository, codecommit:GetRepositoryTriggers, codecommit:ListRepositories, codecommit:ListTagsForResource, devicefarm:GetInstanceProfile, devicefarm:ListInstanceProfiles, devicefarm:ListProjects, ec2:DescribeTrafficMirrorFilters, evidently:GetProject, evidently:ListProjects, evidently:ListTagsForResource, forecast:DescribeDataset, forecast:ListDatasets, forecast:ListTagsForResource, groundstation:GetConfig, groundstation:ListConfigs, groundstation:ListTagsForResource, iam:GetInstanceProfile, iam:GetSAMLProvider, iam:GetServerCertificate, iam:ListAccessKeys, iam:ListGroups, iam:ListInstanceProfiles, iam:ListMFADevices, iam:ListMFADeviceTags, iam:ListRoles, iam:ListSAMLProviders, iot:DescribeFleetMetric, iot:ListFleetMetrics, memorydb:DescribeUsers, memorydb:ListTags, mobiletargeting:GetApp, mobiletargeting:GetCampaigns, networkmanager:GetDevices, networkmanager:GetLinks, networkmanager:GetSites, panorama:ListNodes, rds:DescribeDBProxyEndpoints, redshift:DescribeScheduledActions, sagemaker:DescribeAppImageConfig, sagemaker:DescribeImage, sagemaker:DescribeImageVersion, sagemaker:ListAppImageConfigs, sagemaker:ListImages, and sagemaker:ListImageVersions	此政策現在支援 Amazon AppFlow AWS App Runner、Amazon WorkSpaces 應用程式、Amazon CloudFront AWS CloudFormation、Amazon CloudWatch、AWS CodeArtifactAWS CodeCommit、Amazon Elastic Compute Cloud (Amazon EC2)AWS Device Farm、Amazon CloudWatch Evidently、Amazon Forecast AWS Ground Station、AWS Identity and Access Management(IAM)AWS IoT、、Amazon MemoryDB、Amazon Pinpoint AWS Network ManagerAWS Panorama、Amazon Relational Database Service (Amazon RDS)、Amazon Redshift 和 Amazon SageMaker AI 的其他許可。	2023 年 3 月 30 日
AWSConfigRulesExecutionRole –AWS Config開始追蹤此AWS受管政策的變更	此政策允許AWS Lambda函數存取 API AWS Config和定期AWS Config交付至 Amazon S3 的組態快照。評估AWS自訂 Lambda 規則組態變更的函數需要此存取權。	2023 年 3 月 7 日
AWSConfigRoleForOrganizations –AWS Config開始追蹤此AWS受管政策的變更	此政策允許AWS Config呼叫唯讀AWS Organizations APIs。	2023 年 3 月 7 日
AWSConfigRemediationServiceRolePolicy –AWS Config開始追蹤此AWS受管政策的變更	此政策允許AWS Config代表您修復`NON_COMPLIANT`資源。	2023 年 3 月 7 日
AWSConfigServiceRolePolicy – 新增 auditmanager:GetAccountStatus	此政策現在會授予可傳回AWS Audit Manager帳戶註冊狀態的許可。	2023 年 3 月 3 日
AWS_ConfigRole – 新增 auditmanager:GetAccountStatus	此政策現在會授予可傳回AWS Audit Manager帳戶註冊狀態的許可。	2023 年 3 月 3 日
AWSConfigMultiAccountSetupPolicy –AWS Config開始追蹤此AWS受管政策的變更	此政策允許呼叫AWS ConfigAWS服務，並使用跨組織部署AWS Config資源AWS Organizations。	2023 年 2 月 27 日
AWSConfigServiceRolePolicy – 新增 airflow:ListTagsForResource, iot:ListCustomMetrics, iot:DescribeCustomMetric, appstream:DescribeDirectoryConfigs, appstream:ListTagsForResource, codeguru-reviewer:DescribeRepositoryAssociation, codeguru-reviewer:ListRepositoryAssociations, healthlake:ListFHIRDatastores, healthlake:DescribeFHIRDatastore, healthlake:ListTagsForResource, kinesisvideo:DescribeStream, kinesisvideo:ListStreams, kinesisvideo:ListTagsForStream, kinesisvideo:DescribeSignalingChannel, kinesisvideo:ListTagsForResource, kinesisvideo:ListSignalingChannels, route53-recovery-control-config:DescribeCluster, route53-recovery-control-config:DescribeRoutingControl, route53-recovery-control-config:DescribeSafetyRule, route53-recovery-control-config:ListClusters, route53-recovery-control-config:ListRoutingControls, route53-recovery-control-config:ListSafetyRules, devicefarm:GetTestGridProject, devicefarm:ListTestGridProjects, ec2:DescribeCapacityReservationFleets, ec2:DescribeIpamPools, ec2:DescribeIpams, ec2:GetInstanceTypesFromInstanceRequirement, mobiletargeting:GetApplicationSettings, mobiletargeting:ListTagsForResource, ecr:BatchGetRepositoryScanningConfiguration, iam:ListServerCertificates, guardduty:ListPublishingDestinations, guardduty:DescribePublishingDestination, logs:GetLogDelivery, and logs:ListLogDeliveries	此政策現在支援 Amazon Managed Workflows for Apache Airflow AWS IoT、Amazon WorkSpaces 應用程式、Amazon CodeGuru Reviewer、AWS HealthLake、Amazon Kinesis Video Streams、Amazon Application Recovery Controller (ARC)AWS Device Farm、Amazon Elastic Compute Cloud (Amazon EC2)、Amazon Pinpoint、AWS Identity and Access Management(IAM)、Amazon GuardDuty 和 Amazon CloudWatch Logs 的其他許可。	2023 年 2 月 1 日
AWS_ConfigRole – 新增 airflow:ListTagsForResource, iot:ListCustomMetrics, iot:DescribeCustomMetric, appstream:DescribeDirectoryConfigs, appstream:ListTagsForResource, codeguru-reviewer:DescribeRepositoryAssociation, codeguru-reviewer:ListRepositoryAssociations, healthlake:ListFHIRDatastores, healthlake:DescribeFHIRDatastore, healthlake:ListTagsForResource, kinesisvideo:DescribeStream, kinesisvideo:ListStreams, kinesisvideo:ListTagsForStream, kinesisvideo:DescribeSignalingChannel, kinesisvideo:ListTagsForResource, kinesisvideo:ListSignalingChannels, route53-recovery-control-config:DescribeCluster, route53-recovery-control-config:DescribeRoutingControl, route53-recovery-control-config:DescribeSafetyRule, route53-recovery-control-config:ListClusters, route53-recovery-control-config:ListRoutingControls, route53-recovery-control-config:ListSafetyRules, devicefarm:GetTestGridProject, devicefarm:ListTestGridProjects, ec2:DescribeCapacityReservationFleets, ec2:DescribeIpamPools, ec2:DescribeIpams, ec2:GetInstanceTypesFromInstanceRequirement, mobiletargeting:GetApplicationSettings, mobiletargeting:ListTagsForResource, ecr:BatchGetRepositoryScanningConfiguration, iam:ListServerCertificates, guardduty:ListPublishingDestinations, guardduty:DescribePublishingDestination, logs:GetLogDelivery, and logs:ListLogDeliveries	此政策現在支援 Amazon Managed Workflows for Apache Airflow AWS IoT、Amazon WorkSpaces 應用程式、Amazon CodeGuru Reviewer、AWS HealthLake、Amazon Kinesis Video Streams、Amazon Application Recovery Controller (ARC)AWS Device Farm、Amazon Elastic Compute Cloud (Amazon EC2)、Amazon Pinpoint、AWS Identity and Access Management(IAM)、Amazon GuardDuty 和 Amazon CloudWatch Logs 的其他許可。	2023 年 2 月 1 日
ConfigConformsServiceRolePolicy – 更新 config:DescribeConfigRules	作為安全最佳實務，此政策現可移除 `config:DescribeConfigRules` 的廣泛資源層級許可。	2023 年 1 月 12 日
AWSConfigServiceRolePolicy – 新增 APS:DescribeRuleGroupsNamespace, APS:DescribeWorkspace, APS:ListWorkspaces, auditmanager:GetAssessment, auditmanager:ListAssessments, devicefarm:GetNetworkProfile,AWS Transfer Family devicefarm:GetProject, devicefarm:ListNetworkProfiles, devicefarm:ListTagsForResource, dms:DescribeEndpoints, ds:ListTagsForResource, ec2:DescribeTags, ec2:DescribeTrafficMirrorSessions, ec2:DescribeTrafficMirrorTargets, ec2:GetIpamPoolAllocations, ec2:GetIpamPoolCidrs, glue:GetMLTransform, glue:GetMLTransforms, glue:ListMLTransforms, iot:DescribeScheduledAudit, iot:ListScheduledAudits, ivs:GetChannel, lightsail:GetRelationalDatabases, mediapackage-vod:DescribePackagingConfiguration, mediapackage-vod:ListPackagingConfigurations, networkmanager:DescribeGlobalNetworks, networkmanager:GetTransitGatewayRegistrations, networkmanager:ListTagsForResource, quicksight:DescribeDashboard, quicksight:DescribeDashboardPermissions, quicksight:DescribeTemplate, quicksight:DescribeTemplatePermissions, quicksight:ListDashboards, quicksight:ListTemplates, ram:ListResources, route53-recovery-control-config:DescribeControlPanel, route53-recovery-control-config:ListControlPanels, route53-recovery-control-config:ListTagsForResource, route53resolver:GetResolverQueryLogConfigAssociation, route53resolver:ListResolverQueryLogConfigAssociations, s3:GetAccessPointForObjectLambda, s3:GetAccessPointPolicyForObjectLambda, s3:GetAccessPointPolicyStatusForObjectLambda, s3:GetMultiRegionAccessPoint, s3:ListAccessPointsForObjectLambda, s3:ListMultiRegionAccessPoints, timestream:DescribeEndpoints, transfer:DescribeConnector, transfer:ListConnectors, and transfer:ListTagsForResource	此政策現在支援 Amazon Managed Service for Prometheus、AWS Audit Manager、AWS Device Farm、AWS Database Migration Service(AWS DMS)AWS Directory Service、Amazon Elastic Compute Cloud (Amazon EC2)AWS Glue、AWS IoT、Amazon Lightsail、AWS Elemental MediaPackageAWS Network Manager、、Amazon Quick Suite、Amazon Application Recovery Controller (ARC)AWS Resource Access Manager、Amazon Simple Storage Service (Amazon S3) 和 Amazon Timestream 的其他許可。	2022 年 12 月 15 日
AWS_ConfigRole – 新增 APS:DescribeRuleGroupsNamespace, APS:DescribeWorkspace, APS:ListWorkspaces, auditmanager:GetAssessment, auditmanager:ListAssessments, devicefarm:GetNetworkProfile, devicefarm:GetProject, devicefarm:ListNetworkProfiles, devicefarm:ListTagsForResource, dms:DescribeEndpoints, ds:ListTagsForResource, ec2:DescribeTags, ec2:DescribeTrafficMirrorSessions, ec2:DescribeTrafficMirrorTargets, ec2:GetIpamPoolAllocations, ec2:GetIpamPoolCidrs, glue:GetMLTransform, glue:GetMLTransforms, glue:ListMLTransforms, iot:DescribeScheduledAudit, iot:ListScheduledAudits, ivs:GetChannel, lightsail:GetRelationalDatabases, mediapackage-vod:DescribePackagingConfiguration, mediapackage-vod:ListPackagingConfigurations, networkmanager:DescribeGlobalNetworks, networkmanager:GetTransitGatewayRegistrations, networkmanager:ListTagsForResource, quicksight:DescribeDashboard, quicksight:DescribeDashboardPermissions, quicksight:DescribeTemplate, quicksight:DescribeTemplatePermissions, quicksight:ListDashboards, quicksight:ListTemplates, ram:ListResources, route53-recovery-control-config:DescribeControlPanel, route53-recovery-control-config:ListControlPanels, route53-recovery-control-config:ListTagsForResource, route53resolver:GetResolverQueryLogConfigAssociation, route53resolver:ListResolverQueryLogConfigAssociations, s3:GetAccessPointForObjectLambda, s3:GetAccessPointPolicyForObjectLambda, s3:GetAccessPointPolicyStatusForObjectLambda, s3:GetMultiRegionAccessPoint, s3:ListAccessPointsForObjectLambda, s3:ListMultiRegionAccessPoints, timestream:DescribeEndpoints, transfer:DescribeConnector, transfer:ListConnectors, and transfer:ListTagsForResource	此政策現在支援 Amazon Managed Service for Prometheus、AWS Audit Manager、AWS Device Farm、AWS Database Migration Service(AWS DMS)AWS Directory Service、Amazon Elastic Compute Cloud (Amazon EC2)AWS Glue、AWS IoT、Amazon Lightsail、AWS Elemental MediaPackageAWS Network Manager、、Amazon Quick Suite、Amazon Application Recovery Controller (ARC)AWS Resource Access Manager、Amazon Simple Storage Service (Amazon S3) 和 Amazon Timestream 的其他許可。	2022 年 12 月 15 日
AWSConfigServiceRolePolicy – 新增 cloudformation:ListStackResources and cloudformation:ListStacks	此政策現在授予許可，以傳回指定AWS CloudFormation堆疊之所有資源的描述，並傳回狀態符合指定之堆疊的摘要資訊StackStatusFilter。	2022 年 11 月 7 日
AWS_ConfigRole – 新增 cloudformation:ListStackResources and cloudformation:ListStacks	此政策現在授予許可，以傳回指定AWS CloudFormation堆疊之所有資源的描述，並傳回狀態符合指定之堆疊的摘要資訊StackStatusFilter。	2022 年 11 月 7 日
AWSConfigServiceRolePolicy – 新增 acm-pca:GetCertificateAuthorityCsr, acm-pca:ListCertificateAuthorities, acm-pca:ListTags, airflow:GetEnvironment, airflow:ListEnvironments, amplifyuibuilder:ListThemes, appconfig:ListConfigurationProfiles, appconfig:ListDeployments, appconfig:ListDeploymentStrategies, appconfig:ListEnvironments, appconfig:ListHostedConfigurationVersions, cassandra:Select, cloudwatch:DescribeAnomalyDetectors, cloudwatch:GetDashboard, cloudwatch:ListDashboards, connect:DescribePhoneNumber, connect:ListPhoneNumbers, connect:ListPhoneNumbersV2, connect:SearchAvailablePhoneNumbers, databrew:DescribeDataset, databrew:DescribeJob, databrew:DescribeProject, databrew:DescribeRecipe, databrew:DescribeRuleset, databrew:DescribeSchedule, databrew:ListDatasets, databrew:ListJobs, databrew:ListProjects, databrew:ListRecipes, databrew:ListRecipeVersions, databrew:ListRulesets, databrew:ListSchedules, ec2:DescribeRouteTables, eks:DescribeAddon, eks:DescribeIdentityProviderConfig, eks:ListAddons, eks:ListIdentityProviderConfigs, events:DescribeConnection, events:ListApiDestinations, events:ListConnections, fis:GetExperimentTemplate, fis:ListExperimentTemplates, frauddetector:GetRules, fsx:DescribeBackups, fsx:DescribeSnapshots, fsx:DescribeStorageVirtualMachines, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeVpcPeeringConnections, geo:ListGeofenceCollections, geo:ListPlaceIndexes, geo:ListRouteCalculators, geo:ListTrackers, iot:DescribeAccountAuditConfiguration, iot:DescribeAuthorizer, iot:DescribeDomainConfiguration, iot:DescribeMitigationAction, iot:ListAuthorizers, iot:ListDomainConfigurations, iot:ListMitigationActions, iotsitewise:DescribeAssetModel, iotsitewise:DescribeDashboard, iotsitewise:DescribeGateway, iotsitewise:DescribePortal, iotsitewise:DescribeProject, iotsitewise:ListAssetModels, iotsitewise:ListDashboards, iotsitewise:ListGateways, iotsitewise:ListPortals, iotsitewise:ListProjectAssets, iotsitewise:ListProjects, iotsitewise:ListTagsForResource, iotwireless:GetServiceProfile, iotwireless:GetWirelessDevice, iotwireless:GetWirelessGatewayTaskDefinition, iotwireless:ListServiceProfiles, iotwireless:ListTagsForResource, iotwireless:ListWirelessDevices, iotwireless:ListWirelessGatewayTaskDefinitions, lex:DescribeBotVersion, lex:ListBotVersions, lightsail:GetContainerServices, lightsail:GetDistributions, lightsail:GetRelationalDatabase, lightsail:GetRelationalDatabaseParameters, mobiletargeting:GetApps, mobiletargeting:GetCampaign, mobiletargeting:GetSegment, mobiletargeting:GetSegments, opsworks:DescribeInstances, opsworks:DescribeTimeBasedAutoScaling, opsworks:DescribeVolumes, panorama:DescribeApplicationInstance, panorama:DescribeApplicationInstanceDetails, panorama:DescribePackage, panorama:DescribePackageVersion, panorama:ListApplicationInstances, panorama:ListPackages, quicksight:ListDataSources, ram:ListResourceSharePermissions, rds:DescribeDBProxies, rds:DescribeGlobalClusters, rekognition:ListStreamProcessors, resource-groups:GetGroup, resource-groups:GetGroupConfiguration, resource-groups:GetGroupQuery, resource-groups:GetTags, resource-groups:ListGroupResources, resource-groups:ListGroups, robomaker:ListRobotApplications, robomaker:ListSimulationApplications, route53resolver:GetResolverDnssecConfig, route53resolver:ListResolverDnssecConfigs, s3:ListStorageLensConfigurations, schemas:GetResourcePolicy, servicediscovery:ListInstances, sts:GetCallerIdentity, synthetics:GetGroup, synthetics:ListAssociatedGroups, synthetics:ListGroupResources, and synthetics:ListGroups	此政策現在支援的其他許可AWS Certificate Manager， Amazon Managed Workflows for Apache Airflow、AWS Amplify、AWS AppConfig Amazon Keyspaces、 Amazon CloudWatch、 Amazon Connect AWS Glue DataBrew、 Amazon Elastic Compute Cloud (Amazon EC2)， Amazon Elastic Kubernetes Service (Amazon EKS)， Amazon EventBridge、AWS Fault Injection Service、 Amazon Fraud Detector、 Amazon FSx、 Amazon GameLift 伺服器、 Amazon Location Service AWS IoT、 Amazon Lex、Amazon Lightsail、 Amazon Pinpoint OpsWorks、AWS Panorama、AWS Resource Access Manager、 Amazon Quick Suite、 Amazon Relational Database Service (Amazon RDS)， Amazon Rekognition、AWS RoboMaker、AWS Resource Groups Amazon Route 53、 Amazon Simple Storage Service (Amazon S3)AWS Cloud Map、和AWS Security Token Service。	2022 年 10 月 19 日
AWS_ConfigRole – 新增 acm-pca:GetCertificateAuthorityCsr, acm-pca:ListCertificateAuthorities, acm-pca:ListTags, airflow:GetEnvironment, airflow:ListEnvironments, amplifyuibuilder:ListThemes, appconfig:ListConfigurationProfiles, appconfig:ListDeployments, appconfig:ListDeploymentStrategies, appconfig:ListEnvironments, appconfig:ListHostedConfigurationVersions, cassandra:Select, cloudwatch:DescribeAnomalyDetectors, cloudwatch:GetDashboard, cloudwatch:ListDashboards, connect:DescribePhoneNumber, connect:ListPhoneNumbers, connect:ListPhoneNumbersV2, connect:SearchAvailablePhoneNumbers, databrew:DescribeDataset, databrew:DescribeJob, databrew:DescribeProject, databrew:DescribeRecipe, databrew:DescribeRuleset, databrew:DescribeSchedule, databrew:ListDatasets, databrew:ListJobs, databrew:ListProjects, databrew:ListRecipes, databrew:ListRecipeVersions, databrew:ListRulesets, databrew:ListSchedules, ec2:DescribeRouteTables, eks:DescribeAddon, eks:DescribeIdentityProviderConfig, eks:ListAddons, eks:ListIdentityProviderConfigs, events:DescribeConnection, events:ListApiDestinations, events:ListConnections, fis:GetExperimentTemplate, fis:ListExperimentTemplates, frauddetector:GetRules, fsx:DescribeBackups, fsx:DescribeSnapshots, fsx:DescribeStorageVirtualMachines, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeVpcPeeringConnections, geo:ListGeofenceCollections, geo:ListPlaceIndexes, geo:ListRouteCalculators, geo:ListTrackers, iot:DescribeAccountAuditConfiguration, iot:DescribeAuthorizer, iot:DescribeDomainConfiguration, iot:DescribeMitigationAction, iot:ListAuthorizers, iot:ListDomainConfigurations, iot:ListMitigationActions, iotsitewise:DescribeAssetModel, iotsitewise:DescribeDashboard, iotsitewise:DescribeGateway, iotsitewise:DescribePortal, iotsitewise:DescribeProject, iotsitewise:ListAssetModels, iotsitewise:ListDashboards, iotsitewise:ListGateways, iotsitewise:ListPortals, iotsitewise:ListProjectAssets, iotsitewise:ListProjects, iotsitewise:ListTagsForResource, iotwireless:GetServiceProfile, iotwireless:GetWirelessDevice, iotwireless:GetWirelessGatewayTaskDefinition, iotwireless:ListServiceProfiles, iotwireless:ListTagsForResource, iotwireless:ListWirelessDevices, iotwireless:ListWirelessGatewayTaskDefinitions, lex:DescribeBotVersion, lex:ListBotVersions, lightsail:GetContainerServices, lightsail:GetDistributions, lightsail:GetRelationalDatabase, lightsail:GetRelationalDatabaseParameters, mobiletargeting:GetApps, mobiletargeting:GetCampaign, mobiletargeting:GetSegment, mobiletargeting:GetSegments, opsworks:DescribeInstances, opsworks:DescribeTimeBasedAutoScaling, opsworks:DescribeVolumes, panorama:DescribeApplicationInstance, panorama:DescribeApplicationInstanceDetails, panorama:DescribePackage, panorama:DescribePackageVersion, panorama:ListApplicationInstances, panorama:ListPackages, quicksight:ListDataSources, ram:ListResourceSharePermissions, rds:DescribeDBProxies, rds:DescribeGlobalClusters, rekognition:ListStreamProcessors, resource-groups:GetGroup, resource-groups:GetGroupConfiguration, resource-groups:GetGroupQuery, resource-groups:GetTags, resource-groups:ListGroupResources, resource-groups:ListGroups, robomaker:ListRobotApplications, robomaker:ListSimulationApplications, route53resolver:GetResolverDnssecConfig, route53resolver:ListResolverDnssecConfigs, s3:ListStorageLensConfigurations, schemas:GetResourcePolicy, servicediscovery:ListInstances, sts:GetCallerIdentity, synthetics:GetGroup, synthetics:ListAssociatedGroups, synthetics:ListGroupResources, and synthetics:ListGroups	此政策現在支援的其他許可AWS Certificate Manager， Amazon Managed Workflows for Apache Airflow、AWS Amplify、AWS AppConfig Amazon Keyspaces、 Amazon CloudWatch、 Amazon Connect AWS Glue DataBrew、 Amazon Elastic Compute Cloud (Amazon EC2)， Amazon Elastic Kubernetes Service (Amazon EKS)， Amazon EventBridge、AWS Fault Injection Service、 Amazon Fraud Detector、 Amazon FSx、 Amazon GameLift 伺服器、 Amazon Location Service AWS IoT、 Amazon Lex、Amazon Lightsail、 Amazon Pinpoint OpsWorks、AWS Panorama、AWS Resource Access Manager、 Amazon Quick Suite、 Amazon Relational Database Service (Amazon RDS)， Amazon Rekognition、AWS RoboMaker、AWS Resource Groups Amazon Route 53、 Amazon Simple Storage Service (Amazon S3)AWS Cloud Map、和AWS Security Token Service。	2022 年 10 月 19 日
AWSConfigServiceRolePolicy – 新增 Glue::GetTable	此政策現在授予許可，以擷取指定AWS Glue資料表之 Data Catalog 中的資料表定義。	2022 年 9 月 14 日
AWS_ConfigRole – 新增 Glue::GetTable	此政策現在授予許可，以擷取指定AWS Glue資料表之 Data Catalog 中的資料表定義。	2022 年 9 月 14 日
AWSConfigServiceRolePolicy – 新增 appconfig:ListApplications, appflow:DescribeConnectorProfiles, appsync:GetApiCache, autoscaling-plans:DescribeScalingPlanResources, autoscaling-plans:DescribeScalingPlans, autoscaling-plans:GetScalingPlanResourceForecastData, autoscaling:DescribeWarmPool, backup:DescribeFramework, backup:DescribeReportPlan, backup:ListFrameworks, backup:ListReportPlans, budgets:DescribeBudgetAction, budgets:DescribeBudgetActionsForAccount, budgets:DescribeBudgetActionsForBudget, budgets:ViewBudget, ce:GetAnomalyMonitors, ce:GetAnomalySubscriptions, cloud9:DescribeEnvironmentMemberships, cloud9:DescribeEnvironments, cloud9:ListEnvironments, cloud9:ListTagsForResource, cloudwatch:GetMetricStream, cloudwatch:ListMetricStreams, datasync:DescribeLocationFsxWindows, devops-guru:GetResourceCollection, ds:DescribeDirectories, ec2:DescribeTrafficMirrorFilters, ec2:DescribeTrafficMirrorTargets, ec2:GetNetworkInsightsAccessScopeAnalysisFindings, ec2:GetNetworkInsightsAccessScopeContent, elasticmapreduce:DescribeStudio, elasticmapreduce:GetStudioSessionMapping, elasticmapreduce:ListStudios, elasticmapreduce:ListStudioSessionMappings, events:DescribeEndpoint, events:DescribeEventBus, events:DescribeRule, events:ListArchives, events:ListEndpoints, events:ListEventBuses, events:ListRules, events:ListTagsForResource, events:ListTargetsByRule, finspace:GetEnvironment, finspace:ListEnvironments, frauddetector:GetDetectors, frauddetector:GetDetectorVersion, frauddetector:GetEntityTypes, frauddetector:GetEventTypes, frauddetector:GetExternalModels, frauddetector:GetLabels, frauddetector:GetModels, frauddetector:GetOutcomes, frauddetector:GetVariables, frauddetector:ListTagsForResource, gamelift:DescribeAlias, gamelift:DescribeBuild, gamelift:DescribeFleetAttributes, gamelift:DescribeFleetCapacity, gamelift:DescribeFleetLocationAttributes, gamelift:DescribeFleetLocationCapacity, gamelift:DescribeFleetPortSettings, gamelift:DescribeGameServerGroup, gamelift:DescribeGameSessionQueues, gamelift:DescribeMatchmakingConfigurations, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeRuntimeConfiguration, gamelift:DescribeScript, gamelift:DescribeVpcPeeringAuthorizations, gamelift:ListAliases, gamelift:ListBuilds, gamelift:ListFleets, gamelift:ListGameServerGroups, gamelift:ListScripts, gamelift:ListTagsForResource, geo:ListMaps, glue:GetClassifier, glue:GetClassifiers, imagebuilder:GetContainerRecipe, imagebuilder:GetImage, imagebuilder:GetImagePipeline, imagebuilder:GetImageRecipe, imagebuilder:ListContainerRecipes, imagebuilder:ListImageBuildVersions, imagebuilder:ListImagePipelines, imagebuilder:ListImageRecipes, imagebuilder:ListImages, iot:DescribeCertificate, iot:DescribeDimension, iot:DescribeRoleAlias, iot:DescribeSecurityProfile, iot:GetPolicy, iot:GetTopicRule, iot:GetTopicRuleDestination, iot:ListCertificates, iot:ListDimensions, iot:ListPolicies, iot:ListRoleAliases, iot:ListSecurityProfiles, iot:ListSecurityProfilesForTarget, iot:ListTagsForResource, iot:ListTargetsForSecurityProfile, iot:ListTopicRuleDestinations, iot:ListTopicRules, iot:ListV2LoggingLevels, iot:ValidateSecurityProfileBehaviors, iotanalytics:DescribeChannel, iotanalytics:DescribeDataset, iotanalytics:DescribeDatastore, iotanalytics:DescribePipeline, iotanalytics:ListChannels, iotanalytics:ListDatasets, iotanalytics:ListDatastores, iotanalytics:ListPipelines, iotanalytics:ListTagsForResource, iotevents:DescribeAlarmModel, iotevents:DescribeDetectorModel, iotevents:DescribeInput, iotevents:ListAlarmModels, iotevents:ListDetectorModels, iotevents:ListInputs, iotevents:ListTagsForResource, iotsitewise:DescribeAccessPolicy, iotsitewise:DescribeAsset, iotsitewise:ListAccessPolicies, iotsitewise:ListAssets, iottwinmaker:GetEntity, iottwinmaker:GetScene, iottwinmaker:GetWorkspace, iottwinmaker:ListEntities, iottwinmaker:ListScenes, iottwinmaker:ListTagsForResource, iottwinmaker:ListWorkspaces, ivs:GetPlaybackKeyPair, ivs:GetRecordingConfiguration, ivs:GetStreamKey, ivs:ListChannels, ivs:ListPlaybackKeyPairs, ivs:ListRecordingConfigurations, ivs:ListStreamKeys, ivs:ListTagsForResource, kinesisanalytics:ListApplications, lakeformation:DescribeResource, lakeformation:GetDataLakeSettings, lakeformation:ListPermissions, lakeformation:ListResources, lex:DescribeBot, lex:DescribeBotAlias, lex:DescribeResourcePolicy, lex:ListBotAliases, lex:ListBotLocales, lex:ListBots, lex:ListTagsForResource, license-manager:GetGrant, license-manager:GetLicense, license-manager:ListDistributedGrants, license-manager:ListLicenses, license-manager:ListReceivedGrants, lightsail:GetAlarms, lightsail:GetBuckets, lightsail:GetCertificates, lightsail:GetDisk, lightsail:GetDisks, lightsail:GetInstance, lightsail:GetInstances, lightsail:GetKeyPair, lightsail:GetLoadBalancer, lightsail:GetLoadBalancers, lightsail:GetLoadBalancerTlsCertificates, lightsail:GetStaticIp, lightsail:GetStaticIps, lookoutequipment:DescribeInferenceScheduler, lookoutequipment:ListTagsForResource, lookoutmetrics:DescribeAlert, lookoutmetrics:DescribeAnomalyDetector, lookoutmetrics:ListAlerts, lookoutmetrics:ListAnomalyDetectors, lookoutmetrics:ListMetricSets, lookoutmetrics:ListTagsForResource, lookoutvision:DescribeProject, lookoutvision:ListProjects, managedblockchain:GetMember, managedblockchain:GetNetwork, managedblockchain:GetNode, managedblockchain:ListInvitations, managedblockchain:ListMembers, managedblockchain:ListNodes, mediapackage-vod:DescribePackagingGroup, mediapackage-vod:ListPackagingGroups, mediapackage-vod:ListTagsForResource, mobiletargeting:GetInAppTemplate, mobiletargeting:ListTemplates, mq:DescribeBroker, mq:ListBrokers, nimble:GetLaunchProfile, nimble:GetLaunchProfileDetails, nimble:GetStreamingImage, nimble:GetStudio, nimble:GetStudioComponent, nimble:ListLaunchProfiles, nimble:ListStreamingImages, nimble:ListStudioComponents, nimble:ListStudios, profile:GetDomain, profile:GetIntegration, profile:GetProfileObjectType, profile:ListDomains, profile:ListIntegrations, profile:ListProfileObjectTypes, profile:ListTagsForResource, quicksight:DescribeAnalysis, quicksight:DescribeAnalysisPermissions, quicksight:DescribeDataSet, quicksight:DescribeDataSetPermissions, quicksight:DescribeTheme, quicksight:DescribeThemePermissions, quicksight:ListAnalyses, quicksight:ListDataSets, quicksight:ListThemes, resiliencehub:DescribeApp, resiliencehub:DescribeAppVersionTemplate, resiliencehub:DescribeResiliencyPolicy, resiliencehub:ListApps, resiliencehub:ListAppVersionResourceMappings, resiliencehub:ListResiliencyPolicies, route53-recovery-readiness:GetCell, route53-recovery-readiness:GetReadinessCheck, route53-recovery-readiness:GetRecoveryGroup, route53-recovery-readiness:GetResourceSet, route53-recovery-readiness:ListCells, route53-recovery-readiness:ListReadinessChecks, route53-recovery-readiness:ListRecoveryGroups, route53-recovery-readiness:ListResourceSets, route53resolver:GetFirewallDomainList, route53resolver:GetFirewallRuleGroup, route53resolver:GetFirewallRuleGroupAssociation, route53resolver:GetResolverQueryLogConfig, route53resolver:ListFirewallDomainLists, route53resolver:ListFirewallDomains, route53resolver:ListFirewallRuleGroupAssociations, route53resolver:ListFirewallRuleGroups, route53resolver:ListFirewallRules, route53resolver:ListResolverQueryLogConfigs, rum:GetAppMonitor, rum:GetAppMonitorData, rum:ListAppMonitors, rum:ListTagsForResource, s3-outposts:GetAccessPoint, s3-outposts:GetAccessPointPolicy, s3-outposts:GetBucket, s3-outposts:GetBucketPolicy, s3-outposts:GetBucketTagging, s3-outposts:GetLifecycleConfiguration, s3-outposts:ListAccessPoints, s3-outposts:ListEndpoints, s3-outposts:ListRegionalBuckets, schemas:DescribeDiscoverer, schemas:DescribeRegistry, schemas:DescribeSchema, schemas:ListDiscoverers, schemas:ListRegistries, schemas:ListSchemas, sdb:GetAttributes, sdb:ListDomains, ses:ListEmailTemplates, ses:ListReceiptFilters, ses:ListReceiptRuleSets, ses:ListTemplates, signer:GetSigningProfile, signer:ListProfilePermissions, signer:ListSigningProfiles, synthetics:DescribeCanaries, synthetics:DescribeCanariesLastRun, synthetics:DescribeRuntimeVersions, synthetics:GetCanary, synthetics:GetCanaryRuns, synthetics:ListTagsForResource, timestream:DescribeDatabase, timestream:DescribeTable, timestream:ListDatabases, timestream:ListTables, timestream:ListTagsForResource, transfer:DescribeServer, transfer:DescribeUser, transfer:DescribeWorkflow, transfer:ListServers, transfer:ListUsers, transfer:ListWorkflows, voiceid:DescribeDomain, and voiceid:ListTagsForResource	此政策現在支援 Amazon AppFlow 的其他許可， Amazon CloudWatch、 Amazon CloudWatch RUM、 Amazon CloudWatch Synthetics、 Amazon Connect 客戶設定檔、 Amazon Connect Voice ID、 Amazon DevOpsGuru、 Amazon Elastic Compute Cloud (Amazon EC2)， Amazon EC2 Auto Scaling、 Amazon EMR、 Amazon EventBridge、 Amazon EventBridge 結構描述Amazon FinSpace、 Amazon Fraud Detector、 Amazon GameLift 伺服器、 Amazon Interactive Video Service (Amazon IVS)， Amazon Managed Service for Apache Flink、 EC2 映像建置器、 Amazon Lex、Amazon Lightsail、 Amazon Location Service、 Amazon Lookout for Equipment、 Amazon Lookout for Metrics、 Amazon Lookout for Vision、 Amazon Managed Blockchain、 Amazon MQ、 Amazon Nimble StudioAmazon Pinpoint、 Amazon Quick Suite、 Amazon Application Recovery Controller (ARC)Amazon Route 53 Resolver、 Amazon Simple Storage Service (Amazon S3)、 Amazon SimpleDB、 Amazon Simple Email Service (Amazon SES)、 Amazon Timestream、AWS AppConfigAWS AppSync、AWS Auto ScalingAWS Backup、AWS Budgets、、AWS Cost ExplorerAWS Cloud9、AWS Directory ServiceAWS DataSync、AWS Elemental MediaPackage、AWS Glue、AWS IoTAWS IoT Analytics、AWS IoT EventsAWS IoT SiteWise、AWS IoT TwinMaker、AWS Lake Formation、AWS License Manager、、AWS Resilience Hub、AWS Signer和AWS Transfer Family。	2022 年 9 月 7 日
AWS_ConfigRole – 新增 appconfig:ListApplications, appflow:DescribeConnectorProfiles, appsync:GetApiCache, autoscaling-plans:DescribeScalingPlanResources, autoscaling-plans:DescribeScalingPlans, autoscaling-plans:GetScalingPlanResourceForecastData, autoscaling:DescribeWarmPool, backup:DescribeFramework, backup:DescribeReportPlan, backup:ListFrameworks, backup:ListReportPlans, budgets:DescribeBudgetAction, budgets:DescribeBudgetActionsForAccount, budgets:DescribeBudgetActionsForBudget, budgets:ViewBudget, ce:GetAnomalyMonitors, ce:GetAnomalySubscriptions, cloud9:DescribeEnvironmentMemberships, cloud9:DescribeEnvironments, cloud9:ListEnvironments, cloud9:ListTagsForResource, cloudwatch:GetMetricStream, cloudwatch:ListMetricStreams, datasync:DescribeLocationFsxWindows, devops-guru:GetResourceCollection, ds:DescribeDirectories, ec2:DescribeTrafficMirrorTargets, ec2:GetNetworkInsightsAccessScopeAnalysisFindings, ec2:GetNetworkInsightsAccessScopeContent, elasticmapreduce:DescribeStudio, elasticmapreduce:GetStudioSessionMapping, elasticmapreduce:ListStudios, elasticmapreduce:ListStudioSessionMappings, events:DescribeEndpoint, events:DescribeEventBus, events:DescribeRule, events:ListArchives, events:ListEndpoints, events:ListEventBuses, events:ListRules, events:ListTagsForResource, events:ListTargetsByRule, finspace:GetEnvironment, finspace:ListEnvironments, frauddetector:GetDetectors, frauddetector:GetDetectorVersion, frauddetector:GetEntityTypes, frauddetector:GetEventTypes, frauddetector:GetExternalModels, frauddetector:GetLabels, frauddetector:GetModels, frauddetector:GetOutcomes, frauddetector:GetVariables, frauddetector:ListTagsForResource, gamelift:DescribeAlias, gamelift:DescribeBuild, gamelift:DescribeFleetAttributes, gamelift:DescribeFleetCapacity, gamelift:DescribeFleetLocationAttributes, gamelift:DescribeFleetLocationCapacity, gamelift:DescribeFleetPortSettings, gamelift:DescribeGameServerGroup, gamelift:DescribeGameSessionQueues, gamelift:DescribeMatchmakingConfigurations, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeRuntimeConfiguration, gamelift:DescribeScript, gamelift:DescribeVpcPeeringAuthorizations, gamelift:ListAliases, gamelift:ListBuilds, gamelift:ListFleets, gamelift:ListGameServerGroups, gamelift:ListScripts, gamelift:ListTagsForResource, geo:ListMaps, glue:GetClassifier, glue:GetClassifiers, imagebuilder:GetContainerRecipe, imagebuilder:GetImage, imagebuilder:GetImagePipeline, imagebuilder:GetImageRecipe, imagebuilder:ListContainerRecipes, imagebuilder:ListImageBuildVersions, imagebuilder:ListImagePipelines, imagebuilder:ListImageRecipes, imagebuilder:ListImages, iot:DescribeCertificate, iot:DescribeDimension, iot:DescribeRoleAlias, iot:DescribeSecurityProfile, iot:GetPolicy, iot:GetTopicRule, iot:GetTopicRuleDestination, iot:ListCertificates, iot:ListDimensions, iot:ListPolicies, iot:ListRoleAliases, iot:ListSecurityProfiles, iot:ListSecurityProfilesForTarget, iot:ListTagsForResource, iot:ListTargetsForSecurityProfile, iot:ListTopicRuleDestinations, iot:ListTopicRules, iot:ListV2LoggingLevels, iot:ValidateSecurityProfileBehaviors, iotanalytics:DescribeChannel, iotanalytics:DescribeDataset, iotanalytics:DescribeDatastore, iotanalytics:DescribePipeline, iotanalytics:ListChannels, iotanalytics:ListDatasets, iotanalytics:ListDatastores, iotanalytics:ListPipelines, iotanalytics:ListTagsForResource, iotevents:DescribeAlarmModel, iotevents:DescribeDetectorModel, iotevents:DescribeInput, iotevents:ListAlarmModels, iotevents:ListDetectorModels, iotevents:ListInputs, iotevents:ListTagsForResource, iotsitewise:DescribeAccessPolicy, iotsitewise:DescribeAsset, iotsitewise:ListAccessPolicies, iotsitewise:ListAssets, iottwinmaker:GetEntity, iottwinmaker:GetScene, iottwinmaker:GetWorkspace, iottwinmaker:ListEntities, iottwinmaker:ListScenes, iottwinmaker:ListTagsForResource, iottwinmaker:ListWorkspaces, ivs:GetPlaybackKeyPair, ivs:GetRecordingConfiguration, ivs:GetStreamKey, ivs:ListChannels, ivs:ListPlaybackKeyPairs, ivs:ListRecordingConfigurations, ivs:ListStreamKeys, ivs:ListTagsForResource, kinesisanalytics:ListApplications, lakeformation:DescribeResource, lakeformation:GetDataLakeSettings, lakeformation:ListPermissions, lakeformation:ListResources, lex:DescribeBot, lex:DescribeBotAlias, lex:DescribeResourcePolicy, lex:ListBotAliases, lex:ListBotLocales, lex:ListBots, lex:ListTagsForResource, license-manager:GetGrant, license-manager:GetLicense, license-manager:ListDistributedGrants, license-manager:ListLicenses, license-manager:ListReceivedGrants, lightsail:GetAlarms, lightsail:GetBuckets, lightsail:GetCertificates, lightsail:GetDisk, lightsail:GetDisks, lightsail:GetInstance, lightsail:GetInstances, lightsail:GetKeyPair, lightsail:GetLoadBalancer, lightsail:GetLoadBalancers, lightsail:GetLoadBalancerTlsCertificates, lightsail:GetStaticIp, lightsail:GetStaticIps, lookoutequipment:DescribeInferenceScheduler, lookoutequipment:ListTagsForResource, lookoutmetrics:DescribeAlert, lookoutmetrics:DescribeAnomalyDetector, lookoutmetrics:ListAlerts, lookoutmetrics:ListAnomalyDetectors, lookoutmetrics:ListMetricSets, lookoutmetrics:ListTagsForResource, lookoutvision:DescribeProject, lookoutvision:ListProjects, managedblockchain:GetMember, managedblockchain:GetNetwork, managedblockchain:GetNode, managedblockchain:ListInvitations, managedblockchain:ListMembers, managedblockchain:ListNodes, mediapackage-vod:DescribePackagingGroup, mediapackage-vod:ListPackagingGroups, mediapackage-vod:ListTagsForResource, mobiletargeting:GetInAppTemplate, mobiletargeting:ListTemplates, mq:DescribeBroker, mq:ListBrokers, nimble:GetLaunchProfile, nimble:GetLaunchProfileDetails, nimble:GetStreamingImage, nimble:GetStudio, nimble:GetStudioComponent, nimble:ListLaunchProfiles, nimble:ListStreamingImages, nimble:ListStudioComponents, nimble:ListStudios, profile:GetDomain, profile:GetIntegration, profile:GetProfileObjectType, profile:ListDomains, profile:ListIntegrations, profile:ListProfileObjectTypes, profile:ListTagsForResource, quicksight:DescribeAnalysis, quicksight:DescribeAnalysisPermissions, quicksight:DescribeDataSet, quicksight:DescribeDataSetPermissions, quicksight:DescribeTheme, quicksight:DescribeThemePermissions, quicksight:ListAnalyses, quicksight:ListDataSets, quicksight:ListThemes, resiliencehub:DescribeApp, resiliencehub:DescribeAppVersionTemplate, resiliencehub:DescribeResiliencyPolicy, resiliencehub:ListApps, resiliencehub:ListAppVersionResourceMappings, resiliencehub:ListResiliencyPolicies, route53-recovery-readiness:GetCell, route53-recovery-readiness:GetReadinessCheck, route53-recovery-readiness:GetRecoveryGroup, route53-recovery-readiness:GetResourceSet, route53-recovery-readiness:ListCells, route53-recovery-readiness:ListReadinessChecks, route53-recovery-readiness:ListRecoveryGroups, route53-recovery-readiness:ListResourceSets, route53resolver:GetFirewallDomainList, route53resolver:GetFirewallRuleGroup, route53resolver:GetFirewallRuleGroupAssociation, route53resolver:GetResolverQueryLogConfig, route53resolver:ListFirewallDomainLists, route53resolver:ListFirewallDomains, route53resolver:ListFirewallRuleGroupAssociations, route53resolver:ListFirewallRuleGroups, route53resolver:ListFirewallRules, route53resolver:ListResolverQueryLogConfigs, rum:GetAppMonitor, rum:GetAppMonitorData, rum:ListAppMonitors, rum:ListTagsForResource, s3-outposts:GetAccessPoint, s3-outposts:GetAccessPointPolicy, s3-outposts:GetBucket, s3-outposts:GetBucketPolicy, s3-outposts:GetBucketTagging, s3-outposts:GetLifecycleConfiguration, s3-outposts:ListAccessPoints, s3-outposts:ListEndpoints, s3-outposts:ListRegionalBuckets, schemas:DescribeDiscoverer, schemas:DescribeRegistry, schemas:DescribeSchema, schemas:ListDiscoverers, schemas:ListRegistries, schemas:ListSchemas, sdb:GetAttributes, sdb:ListDomains, ses:ListEmailTemplates, ses:ListReceiptFilters, ses:ListReceiptRuleSets, ses:ListTemplates, signer:GetSigningProfile, signer:ListProfilePermissions, signer:ListSigningProfiles, synthetics:DescribeCanaries, synthetics:DescribeCanariesLastRun, synthetics:DescribeRuntimeVersions, synthetics:GetCanary, synthetics:GetCanaryRuns, synthetics:ListTagsForResource, timestream:DescribeDatabase, timestream:DescribeTable, timestream:ListDatabases, timestream:ListTables, timestream:ListTagsForResource, transfer:DescribeServer, transfer:DescribeUser, transfer:DescribeWorkflow, transfer:ListServers, transfer:ListUsers, transfer:ListWorkflows, voiceid:DescribeDomain, and voiceid:ListTagsForResource	此政策現在支援 Amazon AppFlow 的其他許可， Amazon CloudWatch、 Amazon CloudWatch RUM、 Amazon CloudWatch Synthetics、 Amazon Connect 客戶設定檔、 Amazon Connect Voice ID、 Amazon DevOpsGuru、 Amazon Elastic Compute Cloud (Amazon EC2)， Amazon EC2 Auto Scaling、 Amazon EMR、 Amazon EventBridge、 Amazon EventBridge 結構描述Amazon FinSpace、 Amazon Fraud Detector、 Amazon GameLift 伺服器、 Amazon Interactive Video Service (Amazon IVS)， Amazon Managed Service for Apache Flink、 EC2 映像建置器、 Amazon Lex、Amazon Lightsail、 Amazon Location Service、 Amazon Lookout for Equipment、 Amazon Lookout for Metrics、 Amazon Lookout for Vision、 Amazon Managed Blockchain、 Amazon MQ、 Amazon Nimble StudioAmazon Pinpoint、 Amazon Quick Suite、 Amazon Application Recovery Controller (ARC)Amazon Route 53 Resolver、 Amazon Simple Storage Service (Amazon S3)、 Amazon SimpleDB、 Amazon Simple Email Service (Amazon SES)、 Amazon Timestream、AWS AppConfigAWS AppSync、AWS Auto ScalingAWS Backup、AWS Budgets、、AWS Cost ExplorerAWS Cloud9、AWS Directory ServiceAWS DataSync、AWS Elemental MediaPackage、AWS Glue、AWS IoTAWS IoT Analytics、AWS IoT EventsAWS IoT SiteWise、AWS IoT TwinMaker、AWS Lake Formation、AWS License Manager、、AWS Resilience Hub、AWS Signer和AWS Transfer Family	2022 年 9 月 7 日
AWSConfigServiceRolePolicy – 新增 airflow:ListTagsForResource, iot:ListCustomMetrics, iot:DescribeCustomMetric, appstream:DescribeDirectoryConfigs, appstream:ListTagsForResource, codeguru-reviewer:DescribeRepositoryAssociation, codeguru-reviewer:ListRepositoryAssociations, healthlake:ListFHIRDatastores, healthlake:DescribeFHIRDatastore, healthlake:ListTagsForResource, kinesisvideo:DescribeStream, kinesisvideo:ListStreams, kinesisvideo:ListTagsForStream, kinesisvideo:DescribeSignalingChannel, kinesisvideo:ListTagsForResource, kinesisvideo:ListSignalingChannels, route53-recovery-control-config:DescribeCluster, route53-recovery-control-config:DescribeRoutingControl, route53-recovery-control-config:DescribeSafetyRule, route53-recovery-control-config:ListClusters, route53-recovery-control-config:ListRoutingControls, route53-recovery-control-config:ListSafetyRules, devicefarm:GetTestGridProject, devicefarm:ListTestGridProjects, ec2:DescribeCapacityReservationFleets, ec2:DescribeIpamPools, ec2:DescribeIpams, ec2:GetInstanceTypesFromInstanceRequirement, mobiletargeting:GetApplicationSettings, mobiletargeting:ListTagsForResource, ecr:BatchGetRepositoryScanningConfiguration, iam:ListServerCertificates, guardduty:ListPublishingDestinations, guardduty:DescribePublishingDestination, logs:GetLogDelivery, and logs:ListLogDeliveries	此政策現在支援 Amazon Managed Workflows for Apache Airflow AWS IoT、Amazon WorkSpaces 應用程式、Amazon CodeGuru Reviewer AWS HealthLake、Amazon Kinesis Video Streams、Amazon Application Recovery Controller (ARC)AWS Device Farm、Amazon Elastic Compute Cloud (Amazon EC2)、Amazon Pinpoint、AWS Identity and Access Management(IAM)、Amazon GuardDuty 和 Amazon CloudWatch Logs 的其他許可。	2023 年 2 月 1 日
AWS_ConfigRole – 新增 airflow:ListTagsForResource, iot:ListCustomMetrics, iot:DescribeCustomMetric, appstream:DescribeDirectoryConfigs, appstream:ListTagsForResource, codeguru-reviewer:DescribeRepositoryAssociation, codeguru-reviewer:ListRepositoryAssociations, healthlake:ListFHIRDatastores, healthlake:DescribeFHIRDatastore, healthlake:ListTagsForResource, kinesisvideo:DescribeStream, kinesisvideo:ListStreams, kinesisvideo:ListTagsForStream, kinesisvideo:DescribeSignalingChannel, kinesisvideo:ListTagsForResource, kinesisvideo:ListSignalingChannels, route53-recovery-control-config:DescribeCluster, route53-recovery-control-config:DescribeRoutingControl, route53-recovery-control-config:DescribeSafetyRule, route53-recovery-control-config:ListClusters, route53-recovery-control-config:ListRoutingControls, route53-recovery-control-config:ListSafetyRules, devicefarm:GetTestGridProject, devicefarm:ListTestGridProjects, ec2:DescribeCapacityReservationFleets, ec2:DescribeIpamPools, ec2:DescribeIpams, ec2:GetInstanceTypesFromInstanceRequirement, mobiletargeting:GetApplicationSettings, mobiletargeting:ListTagsForResource, ecr:BatchGetRepositoryScanningConfiguration, iam:ListServerCertificates, guardduty:ListPublishingDestinations, guardduty:DescribePublishingDestination, logs:GetLogDelivery, and logs:ListLogDeliveries	此政策現在支援 Amazon Managed Workflows for Apache Airflow AWS IoT、Amazon WorkSpaces 應用程式、Amazon CodeGuru Reviewer、AWS HealthLake、Amazon Kinesis Video Streams、Amazon Application Recovery Controller (ARC)AWS Device Farm、Amazon Elastic Compute Cloud (Amazon EC2)、Amazon Pinpoint、AWS Identity and Access Management(IAM)、Amazon GuardDuty 和 Amazon CloudWatch Logs 的其他許可。	2023 年 2 月 1 日
ConfigConformsServiceRolePolicy – 更新 config:DescribeConfigRules	作為安全最佳實務，此政策現可移除 `config:DescribeConfigRules` 的廣泛資源層級許可。	2023 年 1 月 12 日
AWSConfigServiceRolePolicy – 新增 APS:DescribeRuleGroupsNamespace, APS:DescribeWorkspace, APS:ListWorkspaces, auditmanager:GetAssessment, auditmanager:ListAssessments, devicefarm:GetNetworkProfile,AWS Transfer Family devicefarm:GetProject, devicefarm:ListNetworkProfiles, devicefarm:ListTagsForResource, dms:DescribeEndpoints, ds:ListTagsForResource, ec2:DescribeTags, ec2:DescribeTrafficMirrorSessions, ec2:DescribeTrafficMirrorTargets, ec2:GetIpamPoolAllocations, ec2:GetIpamPoolCidrs, glue:GetMLTransform, glue:GetMLTransforms, glue:ListMLTransforms, iot:DescribeScheduledAudit, iot:ListScheduledAudits, ivs:GetChannel, lightsail:GetRelationalDatabases, mediapackage-vod:DescribePackagingConfiguration, mediapackage-vod:ListPackagingConfigurations, networkmanager:DescribeGlobalNetworks, networkmanager:GetTransitGatewayRegistrations, networkmanager:ListTagsForResource, quicksight:DescribeDashboard, quicksight:DescribeDashboardPermissions, quicksight:DescribeTemplate, quicksight:DescribeTemplatePermissions, quicksight:ListDashboards, quicksight:ListTemplates, ram:ListResources, route53-recovery-control-config:DescribeControlPanel, route53-recovery-control-config:ListControlPanels, route53-recovery-control-config:ListTagsForResource, route53resolver:GetResolverQueryLogConfigAssociation, route53resolver:ListResolverQueryLogConfigAssociations, s3:GetAccessPointForObjectLambda, s3:GetAccessPointPolicyForObjectLambda, s3:GetAccessPointPolicyStatusForObjectLambda, s3:GetMultiRegionAccessPoint, s3:ListAccessPointsForObjectLambda, s3:ListMultiRegionAccessPoints, timestream:DescribeEndpoints, transfer:DescribeConnector, transfer:ListConnectors, and transfer:ListTagsForResource	此政策現在支援 Amazon Managed Service for Prometheus、AWS Audit Manager、AWS Device Farm、AWS Database Migration Service(AWS DMS)AWS Directory Service、Amazon Elastic Compute Cloud (Amazon EC2)AWS Glue、AWS IoT、Amazon Lightsail、AWS Elemental MediaPackageAWS Network Manager、、Amazon Quick Suite、Amazon Application Recovery Controller (ARC)AWS Resource Access Manager、Amazon Simple Storage Service (Amazon S3) 和 Amazon Timestream 的其他許可。	2022 年 12 月 15 日
AWS_ConfigRole – 新增 APS:DescribeRuleGroupsNamespace, APS:DescribeWorkspace, APS:ListWorkspaces, auditmanager:GetAssessment, auditmanager:ListAssessments, devicefarm:GetNetworkProfile, devicefarm:GetProject, devicefarm:ListNetworkProfiles, devicefarm:ListTagsForResource, dms:DescribeEndpoints, ds:ListTagsForResource, ec2:DescribeTags, ec2:DescribeTrafficMirrorSessions, ec2:DescribeTrafficMirrorTargets, ec2:GetIpamPoolAllocations, ec2:GetIpamPoolCidrs, glue:GetMLTransform, glue:GetMLTransforms, glue:ListMLTransforms, iot:DescribeScheduledAudit, iot:ListScheduledAudits, ivs:GetChannel, lightsail:GetRelationalDatabases, mediapackage-vod:DescribePackagingConfiguration, mediapackage-vod:ListPackagingConfigurations, networkmanager:DescribeGlobalNetworks, networkmanager:GetTransitGatewayRegistrations, networkmanager:ListTagsForResource, quicksight:DescribeDashboard, quicksight:DescribeDashboardPermissions, quicksight:DescribeTemplate, quicksight:DescribeTemplatePermissions, quicksight:ListDashboards, quicksight:ListTemplates, ram:ListResources, route53-recovery-control-config:DescribeControlPanel, route53-recovery-control-config:ListControlPanels, route53-recovery-control-config:ListTagsForResource, route53resolver:GetResolverQueryLogConfigAssociation, route53resolver:ListResolverQueryLogConfigAssociations, s3:GetAccessPointForObjectLambda, s3:GetAccessPointPolicyForObjectLambda, s3:GetAccessPointPolicyStatusForObjectLambda, s3:GetMultiRegionAccessPoint, s3:ListAccessPointsForObjectLambda, s3:ListMultiRegionAccessPoints, timestream:DescribeEndpoints, transfer:DescribeConnector, transfer:ListConnectors, and transfer:ListTagsForResource	此政策現在支援 Amazon Managed Service for Prometheus、AWS Audit Manager、AWS Device Farm、AWS Database Migration Service(AWS DMS)AWS Directory Service、Amazon Elastic Compute Cloud (Amazon EC2)AWS Glue、AWS IoT、Amazon Lightsail、AWS Elemental MediaPackageAWS Network Manager、、Amazon Quick Suite、Amazon Application Recovery Controller (ARC)AWS Resource Access Manager、Amazon Simple Storage Service (Amazon S3) 和 Amazon Timestream 的其他許可。	2022 年 12 月 15 日
AWSConfigServiceRolePolicy – 新增 cloudformation:ListStackResources and cloudformation:ListStacks	此政策現在授予許可，以傳回指定AWS CloudFormation堆疊之所有資源的描述，並傳回狀態符合指定之堆疊的摘要資訊StackStatusFilter。	2022 年 11 月 7 日
AWS_ConfigRole – 新增 cloudformation:ListStackResources and cloudformation:ListStacks	此政策現在授予許可，以傳回指定AWS CloudFormation堆疊之所有資源的描述，並傳回狀態符合指定之堆疊的摘要資訊StackStatusFilter。	2022 年 11 月 7 日
AWSConfigServiceRolePolicy – 新增 acm-pca:GetCertificateAuthorityCsr, acm-pca:ListCertificateAuthorities, acm-pca:ListTags, airflow:GetEnvironment, airflow:ListEnvironments, amplifyuibuilder:ListThemes, appconfig:ListConfigurationProfiles, appconfig:ListDeployments, appconfig:ListDeploymentStrategies, appconfig:ListEnvironments, appconfig:ListHostedConfigurationVersions, cassandra:Select, cloudwatch:DescribeAnomalyDetectors, cloudwatch:GetDashboard, cloudwatch:ListDashboards, connect:DescribePhoneNumber, connect:ListPhoneNumbers, connect:ListPhoneNumbersV2, connect:SearchAvailablePhoneNumbers, databrew:DescribeDataset, databrew:DescribeJob, databrew:DescribeProject, databrew:DescribeRecipe, databrew:DescribeRuleset, databrew:DescribeSchedule, databrew:ListDatasets, databrew:ListJobs, databrew:ListProjects, databrew:ListRecipes, databrew:ListRecipeVersions, databrew:ListRulesets, databrew:ListSchedules, ec2:DescribeRouteTables, eks:DescribeAddon, eks:DescribeIdentityProviderConfig, eks:ListAddons, eks:ListIdentityProviderConfigs, events:DescribeConnection, events:ListApiDestinations, events:ListConnections, fis:GetExperimentTemplate, fis:ListExperimentTemplates, frauddetector:GetRules, fsx:DescribeBackups, fsx:DescribeSnapshots, fsx:DescribeStorageVirtualMachines, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeVpcPeeringConnections, geo:ListGeofenceCollections, geo:ListPlaceIndexes, geo:ListRouteCalculators, geo:ListTrackers, iot:DescribeAccountAuditConfiguration, iot:DescribeAuthorizer, iot:DescribeDomainConfiguration, iot:DescribeMitigationAction, iot:ListAuthorizers, iot:ListDomainConfigurations, iot:ListMitigationActions, iotsitewise:DescribeAssetModel, iotsitewise:DescribeDashboard, iotsitewise:DescribeGateway, iotsitewise:DescribePortal, iotsitewise:DescribeProject, iotsitewise:ListAssetModels, iotsitewise:ListDashboards, iotsitewise:ListGateways, iotsitewise:ListPortals, iotsitewise:ListProjectAssets, iotsitewise:ListProjects, iotsitewise:ListTagsForResource, iotwireless:GetServiceProfile, iotwireless:GetWirelessDevice, iotwireless:GetWirelessGatewayTaskDefinition, iotwireless:ListServiceProfiles, iotwireless:ListTagsForResource, iotwireless:ListWirelessDevices, iotwireless:ListWirelessGatewayTaskDefinitions, lex:DescribeBotVersion, lex:ListBotVersions, lightsail:GetContainerServices, lightsail:GetDistributions, lightsail:GetRelationalDatabase, lightsail:GetRelationalDatabaseParameters, mobiletargeting:GetApps, mobiletargeting:GetCampaign, mobiletargeting:GetSegment, mobiletargeting:GetSegments, opsworks:DescribeInstances, opsworks:DescribeTimeBasedAutoScaling, opsworks:DescribeVolumes, panorama:DescribeApplicationInstance, panorama:DescribeApplicationInstanceDetails, panorama:DescribePackage, panorama:DescribePackageVersion, panorama:ListApplicationInstances, panorama:ListPackages, quicksight:ListDataSources, ram:ListResourceSharePermissions, rds:DescribeDBProxies, rds:DescribeGlobalClusters, rekognition:ListStreamProcessors, resource-groups:GetGroup, resource-groups:GetGroupConfiguration, resource-groups:GetGroupQuery, resource-groups:GetTags, resource-groups:ListGroupResources, resource-groups:ListGroups, robomaker:ListRobotApplications, robomaker:ListSimulationApplications, route53resolver:GetResolverDnssecConfig, route53resolver:ListResolverDnssecConfigs, s3:ListStorageLensConfigurations, schemas:GetResourcePolicy, servicediscovery:ListInstances, sts:GetCallerIdentity, synthetics:GetGroup, synthetics:ListAssociatedGroups, synthetics:ListGroupResources, and synthetics:ListGroups	此政策現在支援的其他許可AWS Certificate Manager， Amazon Managed Workflows for Apache Airflow、AWS Amplify、AWS AppConfig Amazon Keyspaces、 Amazon CloudWatch、 Amazon Connect AWS Glue DataBrew、 Amazon Elastic Compute Cloud (Amazon EC2)， Amazon Elastic Kubernetes Service (Amazon EKS)， Amazon EventBridge、AWS Fault Injection Service、 Amazon Fraud Detector、 Amazon FSx、 Amazon GameLift 伺服器、 Amazon Location Service AWS IoT、 Amazon Lex、Amazon Lightsail、 Amazon Pinpoint OpsWorks、AWS Panorama、AWS Resource Access Manager、 Amazon Quick Suite、 Amazon Relational Database Service (Amazon RDS)， Amazon Rekognition、AWS RoboMaker、AWS Resource Groups Amazon Route 53、 Amazon Simple Storage Service (Amazon S3)AWS Cloud Map、和AWS Security Token Service。	2022 年 10 月 19 日
AWS_ConfigRole – 新增 acm-pca:GetCertificateAuthorityCsr, acm-pca:ListCertificateAuthorities, acm-pca:ListTags, airflow:GetEnvironment, airflow:ListEnvironments, amplifyuibuilder:ListThemes, appconfig:ListConfigurationProfiles, appconfig:ListDeployments, appconfig:ListDeploymentStrategies, appconfig:ListEnvironments, appconfig:ListHostedConfigurationVersions, cassandra:Select, cloudwatch:DescribeAnomalyDetectors, cloudwatch:GetDashboard, cloudwatch:ListDashboards, connect:DescribePhoneNumber, connect:ListPhoneNumbers, connect:ListPhoneNumbersV2, connect:SearchAvailablePhoneNumbers, databrew:DescribeDataset, databrew:DescribeJob, databrew:DescribeProject, databrew:DescribeRecipe, databrew:DescribeRuleset, databrew:DescribeSchedule, databrew:ListDatasets, databrew:ListJobs, databrew:ListProjects, databrew:ListRecipes, databrew:ListRecipeVersions, databrew:ListRulesets, databrew:ListSchedules, ec2:DescribeRouteTables, eks:DescribeAddon, eks:DescribeIdentityProviderConfig, eks:ListAddons, eks:ListIdentityProviderConfigs, events:DescribeConnection, events:ListApiDestinations, events:ListConnections, fis:GetExperimentTemplate, fis:ListExperimentTemplates, frauddetector:GetRules, fsx:DescribeBackups, fsx:DescribeSnapshots, fsx:DescribeStorageVirtualMachines, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeVpcPeeringConnections, geo:ListGeofenceCollections, geo:ListPlaceIndexes, geo:ListRouteCalculators, geo:ListTrackers, iot:DescribeAccountAuditConfiguration, iot:DescribeAuthorizer, iot:DescribeDomainConfiguration, iot:DescribeMitigationAction, iot:ListAuthorizers, iot:ListDomainConfigurations, iot:ListMitigationActions, iotsitewise:DescribeAssetModel, iotsitewise:DescribeDashboard, iotsitewise:DescribeGateway, iotsitewise:DescribePortal, iotsitewise:DescribeProject, iotsitewise:ListAssetModels, iotsitewise:ListDashboards, iotsitewise:ListGateways, iotsitewise:ListPortals, iotsitewise:ListProjectAssets, iotsitewise:ListProjects, iotsitewise:ListTagsForResource, iotwireless:GetServiceProfile, iotwireless:GetWirelessDevice, iotwireless:GetWirelessGatewayTaskDefinition, iotwireless:ListServiceProfiles, iotwireless:ListTagsForResource, iotwireless:ListWirelessDevices, iotwireless:ListWirelessGatewayTaskDefinitions, lex:DescribeBotVersion, lex:ListBotVersions, lightsail:GetContainerServices, lightsail:GetDistributions, lightsail:GetRelationalDatabase, lightsail:GetRelationalDatabaseParameters, mobiletargeting:GetApps, mobiletargeting:GetCampaign, mobiletargeting:GetSegment, mobiletargeting:GetSegments, opsworks:DescribeInstances, opsworks:DescribeTimeBasedAutoScaling, opsworks:DescribeVolumes, panorama:DescribeApplicationInstance, panorama:DescribeApplicationInstanceDetails, panorama:DescribePackage, panorama:DescribePackageVersion, panorama:ListApplicationInstances, panorama:ListPackages, quicksight:ListDataSources, ram:ListResourceSharePermissions, rds:DescribeDBProxies, rds:DescribeGlobalClusters, rekognition:ListStreamProcessors, resource-groups:GetGroup, resource-groups:GetGroupConfiguration, resource-groups:GetGroupQuery, resource-groups:GetTags, resource-groups:ListGroupResources, resource-groups:ListGroups, robomaker:ListRobotApplications, robomaker:ListSimulationApplications, route53resolver:GetResolverDnssecConfig, route53resolver:ListResolverDnssecConfigs, s3:ListStorageLensConfigurations, schemas:GetResourcePolicy, servicediscovery:ListInstances, sts:GetCallerIdentity, synthetics:GetGroup, synthetics:ListAssociatedGroups, synthetics:ListGroupResources, and synthetics:ListGroups	此政策現在支援的其他許可AWS Certificate Manager， Amazon Managed Workflows for Apache Airflow、AWS Amplify、AWS AppConfig Amazon Keyspaces、 Amazon CloudWatch、 Amazon Connect AWS Glue DataBrew、 Amazon Elastic Compute Cloud (Amazon EC2)， Amazon Elastic Kubernetes Service (Amazon EKS)， Amazon EventBridge、AWS Fault Injection Service、 Amazon Fraud Detector、 Amazon FSx、 Amazon GameLift 伺服器、 Amazon Location Service AWS IoT、 Amazon Lex、Amazon Lightsail、 Amazon Pinpoint OpsWorks、AWS Panorama、AWS Resource Access Manager、 Amazon Quick Suite、 Amazon Relational Database Service (Amazon RDS)， Amazon Rekognition、AWS RoboMaker、AWS Resource Groups Amazon Route 53、 Amazon Simple Storage Service (Amazon S3)AWS Cloud Map、和AWS Security Token Service。	2022 年 10 月 19 日
AWSConfigServiceRolePolicy – 新增 Glue::GetTable	此政策現在授予許可，以擷取指定AWS Glue資料表之 Data Catalog 中的資料表定義。	2022 年 9 月 14 日
AWS_ConfigRole – 新增 Glue::GetTable	此政策現在授予許可，以擷取指定AWS Glue資料表之 Data Catalog 中的資料表定義。	2022 年 9 月 14 日
AWSConfigServiceRolePolicy – 新增 appconfig:ListApplications, appflow:DescribeConnectorProfiles, appsync:GetApiCache, autoscaling-plans:DescribeScalingPlanResources, autoscaling-plans:DescribeScalingPlans, autoscaling-plans:GetScalingPlanResourceForecastData, autoscaling:DescribeWarmPool, backup:DescribeFramework, backup:DescribeReportPlan, backup:ListFrameworks, backup:ListReportPlans, budgets:DescribeBudgetAction, budgets:DescribeBudgetActionsForAccount, budgets:DescribeBudgetActionsForBudget, budgets:ViewBudget, ce:GetAnomalyMonitors, ce:GetAnomalySubscriptions, cloud9:DescribeEnvironmentMemberships, cloud9:DescribeEnvironments, cloud9:ListEnvironments, cloud9:ListTagsForResource, cloudwatch:GetMetricStream, cloudwatch:ListMetricStreams, datasync:DescribeLocationFsxWindows, devops-guru:GetResourceCollection, ds:DescribeDirectories, ec2:DescribeTrafficMirrorFilters, ec2:DescribeTrafficMirrorTargets, ec2:GetNetworkInsightsAccessScopeAnalysisFindings, ec2:GetNetworkInsightsAccessScopeContent, elasticmapreduce:DescribeStudio, elasticmapreduce:GetStudioSessionMapping, elasticmapreduce:ListStudios, elasticmapreduce:ListStudioSessionMappings, events:DescribeEndpoint, events:DescribeEventBus, events:DescribeRule, events:ListArchives, events:ListEndpoints, events:ListEventBuses, events:ListRules, events:ListTagsForResource, events:ListTargetsByRule, finspace:GetEnvironment, finspace:ListEnvironments, frauddetector:GetDetectors, frauddetector:GetDetectorVersion, frauddetector:GetEntityTypes, frauddetector:GetEventTypes, frauddetector:GetExternalModels, frauddetector:GetLabels, frauddetector:GetModels, frauddetector:GetOutcomes, frauddetector:GetVariables, frauddetector:ListTagsForResource, gamelift:DescribeAlias, gamelift:DescribeBuild, gamelift:DescribeFleetAttributes, gamelift:DescribeFleetCapacity, gamelift:DescribeFleetLocationAttributes, gamelift:DescribeFleetLocationCapacity, gamelift:DescribeFleetPortSettings, gamelift:DescribeGameServerGroup, gamelift:DescribeGameSessionQueues, gamelift:DescribeMatchmakingConfigurations, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeRuntimeConfiguration, gamelift:DescribeScript, gamelift:DescribeVpcPeeringAuthorizations, gamelift:ListAliases, gamelift:ListBuilds, gamelift:ListFleets, gamelift:ListGameServerGroups, gamelift:ListScripts, gamelift:ListTagsForResource, geo:ListMaps, glue:GetClassifier, glue:GetClassifiers, imagebuilder:GetContainerRecipe, imagebuilder:GetImage, imagebuilder:GetImagePipeline, imagebuilder:GetImageRecipe, imagebuilder:ListContainerRecipes, imagebuilder:ListImageBuildVersions, imagebuilder:ListImagePipelines, imagebuilder:ListImageRecipes, imagebuilder:ListImages, iot:DescribeCertificate, iot:DescribeDimension, iot:DescribeRoleAlias, iot:DescribeSecurityProfile, iot:GetPolicy, iot:GetTopicRule, iot:GetTopicRuleDestination, iot:ListCertificates, iot:ListDimensions, iot:ListPolicies, iot:ListRoleAliases, iot:ListSecurityProfiles, iot:ListSecurityProfilesForTarget, iot:ListTagsForResource, iot:ListTargetsForSecurityProfile, iot:ListTopicRuleDestinations, iot:ListTopicRules, iot:ListV2LoggingLevels, iot:ValidateSecurityProfileBehaviors, iotanalytics:DescribeChannel, iotanalytics:DescribeDataset, iotanalytics:DescribeDatastore, iotanalytics:DescribePipeline, iotanalytics:ListChannels, iotanalytics:ListDatasets, iotanalytics:ListDatastores, iotanalytics:ListPipelines, iotanalytics:ListTagsForResource, iotevents:DescribeAlarmModel, iotevents:DescribeDetectorModel, iotevents:DescribeInput, iotevents:ListAlarmModels, iotevents:ListDetectorModels, iotevents:ListInputs, iotevents:ListTagsForResource, iotsitewise:DescribeAccessPolicy, iotsitewise:DescribeAsset, iotsitewise:ListAccessPolicies, iotsitewise:ListAssets, iottwinmaker:GetEntity, iottwinmaker:GetScene, iottwinmaker:GetWorkspace, iottwinmaker:ListEntities, iottwinmaker:ListScenes, iottwinmaker:ListTagsForResource, iottwinmaker:ListWorkspaces, ivs:GetPlaybackKeyPair, ivs:GetRecordingConfiguration, ivs:GetStreamKey, ivs:ListChannels, ivs:ListPlaybackKeyPairs, ivs:ListRecordingConfigurations, ivs:ListStreamKeys, ivs:ListTagsForResource, kinesisanalytics:ListApplications, lakeformation:DescribeResource, lakeformation:GetDataLakeSettings, lakeformation:ListPermissions, lakeformation:ListResources, lex:DescribeBot, lex:DescribeBotAlias, lex:DescribeResourcePolicy, lex:ListBotAliases, lex:ListBotLocales, lex:ListBots, lex:ListTagsForResource, license-manager:GetGrant, license-manager:GetLicense, license-manager:ListDistributedGrants, license-manager:ListLicenses, license-manager:ListReceivedGrants, lightsail:GetAlarms, lightsail:GetBuckets, lightsail:GetCertificates, lightsail:GetDisk, lightsail:GetDisks, lightsail:GetInstance, lightsail:GetInstances, lightsail:GetKeyPair, lightsail:GetLoadBalancer, lightsail:GetLoadBalancers, lightsail:GetLoadBalancerTlsCertificates, lightsail:GetStaticIp, lightsail:GetStaticIps, lookoutequipment:DescribeInferenceScheduler, lookoutequipment:ListTagsForResource, lookoutmetrics:DescribeAlert, lookoutmetrics:DescribeAnomalyDetector, lookoutmetrics:ListAlerts, lookoutmetrics:ListAnomalyDetectors, lookoutmetrics:ListMetricSets, lookoutmetrics:ListTagsForResource, lookoutvision:DescribeProject, lookoutvision:ListProjects, managedblockchain:GetMember, managedblockchain:GetNetwork, managedblockchain:GetNode, managedblockchain:ListInvitations, managedblockchain:ListMembers, managedblockchain:ListNodes, mediapackage-vod:DescribePackagingGroup, mediapackage-vod:ListPackagingGroups, mediapackage-vod:ListTagsForResource, mobiletargeting:GetInAppTemplate, mobiletargeting:ListTemplates, mq:DescribeBroker, mq:ListBrokers, nimble:GetLaunchProfile, nimble:GetLaunchProfileDetails, nimble:GetStreamingImage, nimble:GetStudio, nimble:GetStudioComponent, nimble:ListLaunchProfiles, nimble:ListStreamingImages, nimble:ListStudioComponents, nimble:ListStudios, profile:GetDomain, profile:GetIntegration, profile:GetProfileObjectType, profile:ListDomains, profile:ListIntegrations, profile:ListProfileObjectTypes, profile:ListTagsForResource, quicksight:DescribeAnalysis, quicksight:DescribeAnalysisPermissions, quicksight:DescribeDataSet, quicksight:DescribeDataSetPermissions, quicksight:DescribeTheme, quicksight:DescribeThemePermissions, quicksight:ListAnalyses, quicksight:ListDataSets, quicksight:ListThemes, resiliencehub:DescribeApp, resiliencehub:DescribeAppVersionTemplate, resiliencehub:DescribeResiliencyPolicy, resiliencehub:ListApps, resiliencehub:ListAppVersionResourceMappings, resiliencehub:ListResiliencyPolicies, route53-recovery-readiness:GetCell, route53-recovery-readiness:GetReadinessCheck, route53-recovery-readiness:GetRecoveryGroup, route53-recovery-readiness:GetResourceSet, route53-recovery-readiness:ListCells, route53-recovery-readiness:ListReadinessChecks, route53-recovery-readiness:ListRecoveryGroups, route53-recovery-readiness:ListResourceSets, route53resolver:GetFirewallDomainList, route53resolver:GetFirewallRuleGroup, route53resolver:GetFirewallRuleGroupAssociation, route53resolver:GetResolverQueryLogConfig, route53resolver:ListFirewallDomainLists, route53resolver:ListFirewallDomains, route53resolver:ListFirewallRuleGroupAssociations, route53resolver:ListFirewallRuleGroups, route53resolver:ListFirewallRules, route53resolver:ListResolverQueryLogConfigs, rum:GetAppMonitor, rum:GetAppMonitorData, rum:ListAppMonitors, rum:ListTagsForResource, s3-outposts:GetAccessPoint, s3-outposts:GetAccessPointPolicy, s3-outposts:GetBucket, s3-outposts:GetBucketPolicy, s3-outposts:GetBucketTagging, s3-outposts:GetLifecycleConfiguration, s3-outposts:ListAccessPoints, s3-outposts:ListEndpoints, s3-outposts:ListRegionalBuckets, schemas:DescribeDiscoverer, schemas:DescribeRegistry, schemas:DescribeSchema, schemas:ListDiscoverers, schemas:ListRegistries, schemas:ListSchemas, sdb:GetAttributes, sdb:ListDomains, ses:ListEmailTemplates, ses:ListReceiptFilters, ses:ListReceiptRuleSets, ses:ListTemplates, signer:GetSigningProfile, signer:ListProfilePermissions, signer:ListSigningProfiles, synthetics:DescribeCanaries, synthetics:DescribeCanariesLastRun, synthetics:DescribeRuntimeVersions, synthetics:GetCanary, synthetics:GetCanaryRuns, synthetics:ListTagsForResource, timestream:DescribeDatabase, timestream:DescribeTable, timestream:ListDatabases, timestream:ListTables, timestream:ListTagsForResource, transfer:DescribeServer, transfer:DescribeUser, transfer:DescribeWorkflow, transfer:ListServers, transfer:ListUsers, transfer:ListWorkflows, voiceid:DescribeDomain, and voiceid:ListTagsForResource	此政策現在支援 Amazon AppFlow 的其他許可， Amazon CloudWatch、 Amazon CloudWatch RUM、 Amazon CloudWatch Synthetics、 Amazon Connect 客戶設定檔、 Amazon Connect Voice ID、 Amazon DevOpsGuru、 Amazon Elastic Compute Cloud (Amazon EC2)， Amazon EC2 Auto Scaling、 Amazon EMR、 Amazon EventBridge、 Amazon EventBridge 結構描述Amazon FinSpace、 Amazon Fraud Detector、 Amazon GameLift 伺服器、 Amazon Interactive Video Service (Amazon IVS)， Amazon Managed Service for Apache Flink、 EC2 映像建置器、 Amazon Lex、Amazon Lightsail、 Amazon Location Service、 Amazon Lookout for Equipment、 Amazon Lookout for Metrics、 Amazon Lookout for Vision、 Amazon Managed Blockchain、 Amazon MQ、 Amazon Nimble StudioAmazon Pinpoint、 Amazon Quick Suite、 Amazon Application Recovery Controller (ARC)Amazon Route 53 Resolver、 Amazon Simple Storage Service (Amazon S3)、 Amazon SimpleDB、 Amazon Simple Email Service (Amazon SES)、 Amazon Timestream、AWS AppConfigAWS AppSync、AWS Auto ScalingAWS Backup、AWS Budgets、、AWS Cost ExplorerAWS Cloud9、AWS Directory ServiceAWS DataSync、AWS Elemental MediaPackage、AWS Glue、AWS IoTAWS IoT Analytics、AWS IoT EventsAWS IoT SiteWise、AWS IoT TwinMaker、AWS Lake Formation、AWS License Manager、、AWS Resilience Hub、AWS Signer和AWS Transfer Family。	2022 年 9 月 7 日
AWS_ConfigRole – 新增 appconfig:ListApplications, appflow:DescribeConnectorProfiles, appsync:GetApiCache, autoscaling-plans:DescribeScalingPlanResources, autoscaling-plans:DescribeScalingPlans, autoscaling-plans:GetScalingPlanResourceForecastData, autoscaling:DescribeWarmPool, backup:DescribeFramework, backup:DescribeReportPlan, backup:ListFrameworks, backup:ListReportPlans, budgets:DescribeBudgetAction, budgets:DescribeBudgetActionsForAccount, budgets:DescribeBudgetActionsForBudget, budgets:ViewBudget, ce:GetAnomalyMonitors, ce:GetAnomalySubscriptions, cloud9:DescribeEnvironmentMemberships, cloud9:DescribeEnvironments, cloud9:ListEnvironments, cloud9:ListTagsForResource, cloudwatch:GetMetricStream, cloudwatch:ListMetricStreams, datasync:DescribeLocationFsxWindows, devops-guru:GetResourceCollection, ds:DescribeDirectories, ec2:DescribeTrafficMirrorTargets, ec2:GetNetworkInsightsAccessScopeAnalysisFindings, ec2:GetNetworkInsightsAccessScopeContent, elasticmapreduce:DescribeStudio, elasticmapreduce:GetStudioSessionMapping, elasticmapreduce:ListStudios, elasticmapreduce:ListStudioSessionMappings, events:DescribeEndpoint, events:DescribeEventBus, events:DescribeRule, events:ListArchives, events:ListEndpoints, events:ListEventBuses, events:ListRules, events:ListTagsForResource, events:ListTargetsByRule, finspace:GetEnvironment, finspace:ListEnvironments, frauddetector:GetDetectors, frauddetector:GetDetectorVersion, frauddetector:GetEntityTypes, frauddetector:GetEventTypes, frauddetector:GetExternalModels, frauddetector:GetLabels, frauddetector:GetModels, frauddetector:GetOutcomes, frauddetector:GetVariables, frauddetector:ListTagsForResource, gamelift:DescribeAlias, gamelift:DescribeBuild, gamelift:DescribeFleetAttributes, gamelift:DescribeFleetCapacity, gamelift:DescribeFleetLocationAttributes, gamelift:DescribeFleetLocationCapacity, gamelift:DescribeFleetPortSettings, gamelift:DescribeGameServerGroup, gamelift:DescribeGameSessionQueues, gamelift:DescribeMatchmakingConfigurations, gamelift:DescribeMatchmakingRuleSets, gamelift:DescribeRuntimeConfiguration, gamelift:DescribeScript, gamelift:DescribeVpcPeeringAuthorizations, gamelift:ListAliases, gamelift:ListBuilds, gamelift:ListFleets, gamelift:ListGameServerGroups, gamelift:ListScripts, gamelift:ListTagsForResource, geo:ListMaps, glue:GetClassifier, glue:GetClassifiers, imagebuilder:GetContainerRecipe, imagebuilder:GetImage, imagebuilder:GetImagePipeline, imagebuilder:GetImageRecipe, imagebuilder:ListContainerRecipes, imagebuilder:ListImageBuildVersions, imagebuilder:ListImagePipelines, imagebuilder:ListImageRecipes, imagebuilder:ListImages, iot:DescribeCertificate, iot:DescribeDimension, iot:DescribeRoleAlias, iot:DescribeSecurityProfile, iot:GetPolicy, iot:GetTopicRule, iot:GetTopicRuleDestination, iot:ListCertificates, iot:ListDimensions, iot:ListPolicies, iot:ListRoleAliases, iot:ListSecurityProfiles, iot:ListSecurityProfilesForTarget, iot:ListTagsForResource, iot:ListTargetsForSecurityProfile, iot:ListTopicRuleDestinations, iot:ListTopicRules, iot:ListV2LoggingLevels, iot:ValidateSecurityProfileBehaviors, iotanalytics:DescribeChannel, iotanalytics:DescribeDataset, iotanalytics:DescribeDatastore, iotanalytics:DescribePipeline, iotanalytics:ListChannels, iotanalytics:ListDatasets, iotanalytics:ListDatastores, iotanalytics:ListPipelines, iotanalytics:ListTagsForResource, iotevents:DescribeAlarmModel, iotevents:DescribeDetectorModel, iotevents:DescribeInput, iotevents:ListAlarmModels, iotevents:ListDetectorModels, iotevents:ListInputs, iotevents:ListTagsForResource, iotsitewise:DescribeAccessPolicy, iotsitewise:DescribeAsset, iotsitewise:ListAccessPolicies, iotsitewise:ListAssets, iottwinmaker:GetEntity, iottwinmaker:GetScene, iottwinmaker:GetWorkspace, iottwinmaker:ListEntities, iottwinmaker:ListScenes, iottwinmaker:ListTagsForResource, iottwinmaker:ListWorkspaces, ivs:GetPlaybackKeyPair, ivs:GetRecordingConfiguration, ivs:GetStreamKey, ivs:ListChannels, ivs:ListPlaybackKeyPairs, ivs:ListRecordingConfigurations, ivs:ListStreamKeys, ivs:ListTagsForResource, kinesisanalytics:ListApplications, lakeformation:DescribeResource, lakeformation:GetDataLakeSettings, lakeformation:ListPermissions, lakeformation:ListResources, lex:DescribeBot, lex:DescribeBotAlias, lex:DescribeResourcePolicy, lex:ListBotAliases, lex:ListBotLocales, lex:ListBots, lex:ListTagsForResource, license-manager:GetGrant, license-manager:GetLicense, license-manager:ListDistributedGrants, license-manager:ListLicenses, license-manager:ListReceivedGrants, lightsail:GetAlarms, lightsail:GetBuckets, lightsail:GetCertificates, lightsail:GetDisk, lightsail:GetDisks, lightsail:GetInstance, lightsail:GetInstances, lightsail:GetKeyPair, lightsail:GetLoadBalancer, lightsail:GetLoadBalancers, lightsail:GetLoadBalancerTlsCertificates, lightsail:GetStaticIp, lightsail:GetStaticIps, lookoutequipment:DescribeInferenceScheduler, lookoutequipment:ListTagsForResource, lookoutmetrics:DescribeAlert, lookoutmetrics:DescribeAnomalyDetector, lookoutmetrics:ListAlerts, lookoutmetrics:ListAnomalyDetectors, lookoutmetrics:ListMetricSets, lookoutmetrics:ListTagsForResource, lookoutvision:DescribeProject, lookoutvision:ListProjects, managedblockchain:GetMember, managedblockchain:GetNetwork, managedblockchain:GetNode, managedblockchain:ListInvitations, managedblockchain:ListMembers, managedblockchain:ListNodes, mediapackage-vod:DescribePackagingGroup, mediapackage-vod:ListPackagingGroups, mediapackage-vod:ListTagsForResource, mobiletargeting:GetInAppTemplate, mobiletargeting:ListTemplates, mq:DescribeBroker, mq:ListBrokers, nimble:GetLaunchProfile, nimble:GetLaunchProfileDetails, nimble:GetStreamingImage, nimble:GetStudio, nimble:GetStudioComponent, nimble:ListLaunchProfiles, nimble:ListStreamingImages, nimble:ListStudioComponents, nimble:ListStudios, profile:GetDomain, profile:GetIntegration, profile:GetProfileObjectType, profile:ListDomains, profile:ListIntegrations, profile:ListProfileObjectTypes, profile:ListTagsForResource, quicksight:DescribeAnalysis, quicksight:DescribeAnalysisPermissions, quicksight:DescribeDataSet, quicksight:DescribeDataSetPermissions, quicksight:DescribeTheme, quicksight:DescribeThemePermissions, quicksight:ListAnalyses, quicksight:ListDataSets, quicksight:ListThemes, resiliencehub:DescribeApp, resiliencehub:DescribeAppVersionTemplate, resiliencehub:DescribeResiliencyPolicy, resiliencehub:ListApps, resiliencehub:ListAppVersionResourceMappings, resiliencehub:ListResiliencyPolicies, route53-recovery-readiness:GetCell, route53-recovery-readiness:GetReadinessCheck, route53-recovery-readiness:GetRecoveryGroup, route53-recovery-readiness:GetResourceSet, route53-recovery-readiness:ListCells, route53-recovery-readiness:ListReadinessChecks, route53-recovery-readiness:ListRecoveryGroups, route53-recovery-readiness:ListResourceSets, route53resolver:GetFirewallDomainList, route53resolver:GetFirewallRuleGroup, route53resolver:GetFirewallRuleGroupAssociation, route53resolver:GetResolverQueryLogConfig, route53resolver:ListFirewallDomainLists, route53resolver:ListFirewallDomains, route53resolver:ListFirewallRuleGroupAssociations, route53resolver:ListFirewallRuleGroups, route53resolver:ListFirewallRules, route53resolver:ListResolverQueryLogConfigs, rum:GetAppMonitor, rum:GetAppMonitorData, rum:ListAppMonitors, rum:ListTagsForResource, s3-outposts:GetAccessPoint, s3-outposts:GetAccessPointPolicy, s3-outposts:GetBucket, s3-outposts:GetBucketPolicy, s3-outposts:GetBucketTagging, s3-outposts:GetLifecycleConfiguration, s3-outposts:ListAccessPoints, s3-outposts:ListEndpoints, s3-outposts:ListRegionalBuckets, schemas:DescribeDiscoverer, schemas:DescribeRegistry, schemas:DescribeSchema, schemas:ListDiscoverers, schemas:ListRegistries, schemas:ListSchemas, sdb:GetAttributes, sdb:ListDomains, ses:ListEmailTemplates, ses:ListReceiptFilters, ses:ListReceiptRuleSets, ses:ListTemplates, signer:GetSigningProfile, signer:ListProfilePermissions, signer:ListSigningProfiles, synthetics:DescribeCanaries, synthetics:DescribeCanariesLastRun, synthetics:DescribeRuntimeVersions, synthetics:GetCanary, synthetics:GetCanaryRuns, synthetics:ListTagsForResource, timestream:DescribeDatabase, timestream:DescribeTable, timestream:ListDatabases, timestream:ListTables, timestream:ListTagsForResource, transfer:DescribeServer, transfer:DescribeUser, transfer:DescribeWorkflow, transfer:ListServers, transfer:ListUsers, transfer:ListWorkflows, voiceid:DescribeDomain, and voiceid:ListTagsForResource	此政策現在支援 Amazon AppFlow 的其他許可， Amazon CloudWatch、 Amazon CloudWatch RUM、 Amazon CloudWatch Synthetics、 Amazon Connect 客戶設定檔、 Amazon Connect Voice ID、 Amazon DevOpsGuru、 Amazon Elastic Compute Cloud (Amazon EC2)， Amazon EC2 Auto Scaling、 Amazon EMR、 Amazon EventBridge、 Amazon EventBridge 結構描述Amazon FinSpace、 Amazon Fraud Detector、 Amazon GameLift 伺服器、 Amazon Interactive Video Service (Amazon IVS)， Amazon Managed Service for Apache Flink、 EC2 映像建置器、 Amazon Lex、Amazon Lightsail、 Amazon Location Service、 Amazon Lookout for Equipment、 Amazon Lookout for Metrics、 Amazon Lookout for Vision、 Amazon Managed Blockchain、 Amazon MQ、 Amazon Nimble StudioAmazon Pinpoint、 Amazon Quick Suite、 Amazon Application Recovery Controller (ARC)Amazon Route 53 Resolver、 Amazon Simple Storage Service (Amazon S3)、 Amazon SimpleDB、 Amazon Simple Email Service (Amazon SES)、 Amazon Timestream、AWS AppConfigAWS AppSync、AWS Auto ScalingAWS Backup、AWS Budgets、、AWS Cost ExplorerAWS Cloud9、AWS Directory ServiceAWS DataSync、AWS Elemental MediaPackage、AWS Glue、AWS IoTAWS IoT Analytics、AWS IoT EventsAWS IoT SiteWise、AWS IoT TwinMaker、AWS Lake Formation、AWS License Manager、、AWS Resilience Hub、AWS Signer和AWS Transfer Family	2022 年 9 月 7 日
AWSConfigServiceRolePolicy – 新增 datasync:ListAgents, datasync:ListLocations, datasync:ListTasks, servicediscovery:ListNamespaces, servicediscovery:ListServices, and ses:ListContactLists	此政策現在授予許可，以傳回中的客服人員、DataSync 來源和目的地和 DataSync 任務清單AWS DataSyncAWS 帳戶；列出與AWS Cloud Map中一或多個指定命名空間相關聯的命名空間和服務摘要資訊AWS 帳戶；並列出中可用的所有 Amazon Simple Email Service (Amazon SES) 聯絡人清單AWS 帳戶。	2022 年 8 月 22 日
AWS_ConfigRole – 新增 datasync:ListAgents, datasync:ListLocations, datasync:ListTasks, servicediscovery:ListNamespaces, servicediscovery:ListServices, and ses:ListContactLists	此政策現在授予許可，以傳回中的客服人員、DataSync 來源和目的地和 DataSync 任務清單AWS DataSyncAWS 帳戶；列出與AWS Cloud Map中一或多個指定命名空間相關聯的命名空間和服務摘要資訊AWS 帳戶；並列出中可用的所有 Amazon Simple Email Service (Amazon SES) 聯絡人清單AWS 帳戶。	2022 年 8 月 22 日
ConfigConformsServiceRolePolicy – 新增 cloudwatch:PutMetricData	此政策現在會授予可將指標資料點發布至 Amazon CloudWatch 的許可。	2022 年 7 月 25 日
AWSConfigServiceRolePolicy – 新增 amplifyuibuilder:ExportThemes, amplifyuibuilder:GetTheme, appconfig:GetApplication, appconfig:GetApplication, appconfig:GetConfigurationProfile, appconfig:GetConfigurationProfile, appconfig:GetDeployment, appconfig:GetDeploymentStrategy, appconfig:GetEnvironment, appconfig:GetHostedConfigurationVersion, appconfig:ListTagsForResource, appsync:GetGraphqlApi, appsync:ListGraphqlApis, billingconductor: ListPricingRulesAssociatedToPricingPlan, billingconductor:ListAccountAssociations, billingconductor:ListBillingGroups, billingconductor:ListCustomLineItems, billingconductor:ListPricingPlans, billingconductor:ListPricingRules, billingconductor:ListTagsForResource, datasync:DescribeAgent, datasync:DescribeLocationEfs, datasync:DescribeLocationFsxLustre, datasync:DescribeLocationHdfs, datasync:DescribeLocationNfs, datasync:DescribeLocationObjectStorage, datasync:DescribeLocationS3, datasync:DescribeLocationSmb, datasync:DescribeTask, datasync:ListTagsForResource, ecr:DescribePullThroughCacheRules, ecr:DescribeRegistry, ecr:GetRegistryPolicy, elasticache:DescribeCacheParameters, elasticloadbalancing:DescribeListenerCertificates, elasticloadbalancing:DescribeTargetGroupAttributes, elasticloadbalancing:DescribeTargetGroups, elasticloadbalancing:DescribeTargetHealth, events:DescribeApiDestination, events:DescribeArchive, fms:GetNotificationChannel, fms:GetPolicy, fms:ListPolicies, fms:ListTagsForResource, fsx:DescribeVolumes, geo:DescribeGeofenceCollection, geo:DescribeMap, geo:DescribePlaceIndex, geo:DescribeRouteCalculator, geo:DescribeTracker, geo:ListTrackerConsumers, glue:BatchGetJobs, glue:BatchGetWorkflows, glue:GetCrawler, glue:GetCrawlers, glue:GetJob, glue:GetJobs, glue:GetWorkflow, imagebuilder: GetComponent, imagebuilder: ListComponentBuildVersions, imagebuilder: ListComponents, imagebuilder:GetDistributionConfiguration, imagebuilder:GetInfrastructureConfiguration, imagebuilder:ListDistributionConfigurations, imagebuilder:ListInfrastructureConfigurations, kafka:DescribeClusterV2, kafka:ListClustersV2, kinesisanalytics:DescribeApplication, kinesisanalytics:ListTagsForResource, quicksight:DescribeDataSource, quicksight:DescribeDataSourcePermissions, quicksight:ListTagsForResource, rekognition:DescribeStreamProcessor, rekognition:ListTagsForResource, robomaker:DescribeRobotApplication, robomaker:DescribeSimulationApplication, s3:GetStorageLensConfiguration, s3:GetStorageLensConfigurationTagging, servicediscovery:GetInstance, servicediscovery:GetNamespace, servicediscovery:GetService, servicediscovery:ListTagsForResource, ses:DescribeReceiptRule, ses:DescribeReceiptRuleSet, ses:GetContactList, ses:GetEmailTemplate, ses:GetTemplate, and sso:GetInlinePolicyForPermissionSet	此政策現在支援 Amazon Elastic Container Service (Amazon ECS)、Amazon ElastiCache、Amazon EventBridge、Amazon FSx、Amazon Managed Service for Apache Flink、Amazon Location Service、Amazon Managed Streaming for Apache Kafka、Amazon Quick Suite、Amazon Rekognition AWS RoboMaker、Amazon Simple Storage Service (Amazon S3)、Amazon Simple Email Service (Amazon SES)AWS Amplify、AWS AppConfigAWS AppSync、AWS Billing Conductor、AWS Firewall Manager、AWS DataSync、、AWS Glue、、AWS IAM Identity Center(IAM Identity Center)、EC2 Image Builder 和 Elastic Load Balancing 的其他許可。	2022 年 7 月 15 日
AWS_ConfigRole – 新增 amplifyuibuilder:ExportThemes, amplifyuibuilder:GetTheme, appconfig:GetApplication, appconfig:GetApplication, appconfig:GetConfigurationProfile, appconfig:GetConfigurationProfile, appconfig:GetDeployment, appconfig:GetDeploymentStrategy, appconfig:GetEnvironment, appconfig:GetHostedConfigurationVersion, appconfig:ListTagsForResource, appsync:GetGraphqlApi, appsync:ListGraphqlApis, billingconductor: ListPricingRulesAssociatedToPricingPlan, billingconductor:ListAccountAssociations, billingconductor:ListBillingGroups, billingconductor:ListCustomLineItems, billingconductor:ListPricingPlans, billingconductor:ListPricingRules, billingconductor:ListTagsForResource, datasync:DescribeAgent, datasync:DescribeLocationEfs, datasync:DescribeLocationFsxLustre, datasync:DescribeLocationHdfs, datasync:DescribeLocationNfs, datasync:DescribeLocationObjectStorage, datasync:DescribeLocationS3, datasync:DescribeLocationSmb, datasync:DescribeTask, datasync:ListTagsForResource, ecr:DescribePullThroughCacheRules, ecr:DescribeRegistry, ecr:GetRegistryPolicy, elasticache:DescribeCacheParameters, elasticloadbalancing:DescribeListenerCertificates, elasticloadbalancing:DescribeTargetGroupAttributes, elasticloadbalancing:DescribeTargetGroups, elasticloadbalancing:DescribeTargetHealth, events:DescribeApiDestination, events:DescribeArchive, fms:GetNotificationChannel, fms:GetPolicy, fms:ListPolicies, fms:ListTagsForResource, fsx:DescribeVolumes, geo:DescribeGeofenceCollection, geo:DescribeMap, geo:DescribePlaceIndex, geo:DescribeRouteCalculator, geo:DescribeTracker, geo:ListTrackerConsumers, glue:BatchGetJobs, glue:BatchGetWorkflows, glue:GetCrawler, glue:GetCrawlers, glue:GetJob, glue:GetJobs, glue:GetWorkflow, imagebuilder: GetComponent, imagebuilder: ListComponentBuildVersions, imagebuilder: ListComponents, imagebuilder:GetDistributionConfiguration, imagebuilder:GetInfrastructureConfiguration, imagebuilder:ListDistributionConfigurations, imagebuilder:ListInfrastructureConfigurations, kafka:DescribeClusterV2, kafka:ListClustersV2, kinesisanalytics:DescribeApplication, kinesisanalytics:ListTagsForResource, quicksight:DescribeDataSource, quicksight:DescribeDataSourcePermissions, quicksight:ListTagsForResource, rekognition:DescribeStreamProcessor, rekognition:ListTagsForResource, robomaker:DescribeRobotApplication, robomaker:DescribeSimulationApplication, s3:GetStorageLensConfiguration, s3:GetStorageLensConfigurationTagging, servicediscovery:GetInstance, servicediscovery:GetNamespace, servicediscovery:GetService, servicediscovery:ListTagsForResource, ses:DescribeReceiptRule, ses:DescribeReceiptRuleSet, ses:GetContactList, ses:GetEmailTemplate, ses:GetTemplate, and sso:GetInlinePolicyForPermissionSet	此政策現在支援 Amazon Elastic Container Service (Amazon ECS)、Amazon ElastiCache、Amazon EventBridge、Amazon FSx、Amazon Managed Service for Apache Flink、Amazon Location Service、Amazon Managed Streaming for Apache Kafka、Amazon Quick Suite、Amazon Rekognition AWS RoboMaker、Amazon Simple Storage Service (Amazon S3)、Amazon Simple Email Service (Amazon SES)AWS Amplify、AWS AppConfigAWS AppSync、AWS Billing Conductor、AWS Firewall Manager、AWS DataSync、、AWS Glue、、AWS IAM Identity Center(IAM Identity Center)、EC2 Image Builder 和 Elastic Load Balancing 的其他許可。	2022 年 7 月 15 日
AWSConfigServiceRolePolicy – 新增 athena:GetDataCatalog, athena:ListDataCatalogs, athena:ListTagsForResource, detective:ListGraphs, detective:ListTagsForResource, glue:BatchGetDevEndpoints, glue:GetDevEndpoint, glue:GetDevEndpoints, glue:GetSecurityConfiguration, glue:GetSecurityConfigurations, glue:GetTags glue:GetWorkGroup, glue:ListCrawlers, glue:ListDevEndpoints, glue:ListJobs, glue:ListMembers, glue:ListWorkflows, glue:ListWorkGroups, guardduty:GetFilter, guardduty:GetIPSet, guardduty:GetThreatIntelSet, guardduty:GetMembers, guardduty:ListFilters, guardduty:ListIPSets, guardduty:ListTagsForResource, guardduty:ListThreatIntelSets, macie:GetMacieSession, ram:GetResourceShareAssociations, ram:GetResourceShares, ses:GetConfigurationSet, ses:GetConfigurationSetEventDestinations, ses:ListConfigurationSets, sso:DescribeInstanceAccessControlAttributeConfiguration, sso:DescribePermissionSet, sso:ListManagedPoliciesInPermissionSet, sso:ListPermissionSets, and sso:ListTagsForResource	此政策現在授予取得指定 Amazon Athena 資料目錄的許可，在中列出 Athena 資料目錄AWS 帳戶，和列出與 Athena 工作群組或資料目錄資源相關聯的標籤；取得 Amazon Detective 行為圖表清單，並列出 Detective 行為圖表的標籤；取得指定AWS Glue開發端點名稱清單的資源中繼資料清單，取得指定AWS Glue開發端點的相關資訊，取得AWS Glue中的所有開發端點AWS 帳戶，擷取指定的AWS Glue安全組態、取得所有AWS Glue安全組態、取得與AWS Glue資源相關聯的標籤清單，取得具有指定名稱AWS Glue的工作群組相關資訊，擷取帳戶中所有AWS Glue爬蟲程式資源AWS的名稱，取得中所有AWS Glue`DevEndpoint`資源的名稱AWS 帳戶，列出中所有AWS Glue任務資源的名稱AWS 帳戶，取得AWS Glue成員帳戶的詳細資訊，列出在帳戶中建立的AWS Glue工作流程名稱，和列出帳戶的可用AWS Glue工作群組；擷取 Amazon GuardDuty 篩選條件的詳細資訊，擷取 GuardDuty IPSet、擷取 GuardDuty ThreatIntelSet、擷取 GuardDuty 成員帳戶、取得 GuardDuty 篩選條件清單，取得 GuardDuty 服務的 IPSets，擷取 GuardDuty Service 的標籤，並取得 GuardDuty 服務的 ThreatIntelSets；取得 Amazon Macie 帳戶的目前狀態和組態設定；擷取AWS Resource Access Manager(AWS RAM) 資源共用的資源和委託人關聯，並擷取資源共用的詳細資訊AWS RAM；取得 Amazon Simple Email Service (Amazon SES) 現有組態設定的相關資訊，取得與 Amazon SES 組態設定相關聯的事件目的地清單，和列出與 Amazon SES 帳戶相關聯的所有組態集；若要取得 Identity Center 目錄屬性的清單，取得AWS IAM Identity Center許可集的詳細資訊，取得連接至指定 IAM Identity Center 許可集的 IAM 受管政策，取得 IAM Identity Center 執行個體的許可集，和取得 IAM Identity Center 資源的標籤。	2022 年 5 月 31 日
AWS_ConfigRole – 新增 athena:GetDataCatalog, athena:ListDataCatalogs, athena:ListTagsForResource, detective:ListGraphs, detective:ListTagsForResource, glue:BatchGetDevEndpoints, glue:GetDevEndpoint, glue:GetDevEndpoints, glue:GetSecurityConfiguration, glue:GetSecurityConfigurations, glue:GetTags glue:GetWorkGroup, glue:ListCrawlers, glue:ListDevEndpoints, glue:ListJobs, glue:ListMembers, glue:ListWorkflows, glue:ListWorkGroups, guardduty:GetFilter, guardduty:GetIPSet, guardduty:GetThreatIntelSet, guardduty:GetMembers, guardduty:ListFilters, guardduty:ListIPSets, guardduty:ListTagsForResource, guardduty:ListThreatIntelSets, macie:GetMacieSession, ram:GetResourceShareAssociations, ram:GetResourceShares, ses:GetConfigurationSet, ses:GetConfigurationSetEventDestinations, ses:ListConfigurationSets, sso:DescribeInstanceAccessControlAttributeConfiguration, sso:DescribePermissionSet, sso:ListManagedPoliciesInPermissionSet, sso:ListPermissionSets, and sso:ListTagsForResource	此政策現在授予取得指定 Amazon Athena 資料目錄的許可，在中列出 Athena 資料目錄AWS 帳戶，和列出與 Athena 工作群組或資料目錄資源相關聯的標籤；取得 Amazon Detective 行為圖表清單，並列出 Detective 行為圖表的標籤；取得指定AWS Glue開發端點名稱清單的資源中繼資料清單，取得指定AWS Glue開發端點的相關資訊，取得AWS Glue中的所有開發端點AWS 帳戶，擷取指定的AWS Glue安全組態、取得所有AWS Glue安全組態、取得與AWS Glue資源相關聯的標籤清單，取得具有指定名稱AWS Glue的工作群組相關資訊，擷取帳戶中所有AWS Glue爬蟲程式資源AWS的名稱，取得中所有AWS Glue`DevEndpoint`資源的名稱AWS 帳戶，列出中所有AWS Glue任務資源的名稱AWS 帳戶，取得AWS Glue成員帳戶的詳細資訊，列出在帳戶中建立的AWS Glue工作流程名稱，和列出帳戶的可用AWS Glue工作群組；擷取 Amazon GuardDuty 篩選條件的詳細資訊，擷取 GuardDuty IPSet、擷取 GuardDuty ThreatIntelSet、擷取 GuardDuty 成員帳戶、取得 GuardDuty 篩選條件清單，取得 GuardDuty 服務的 IPSets，擷取 GuardDuty Service 的標籤，並取得 GuardDuty 服務的 ThreatIntelSets；取得 Amazon Macie 帳戶的目前狀態和組態設定；擷取AWS Resource Access Manager(AWS RAM) 資源共用的資源和委託人關聯，並擷取資源共用的詳細資訊AWS RAM；取得 Amazon Simple Email Service (Amazon SES) 現有組態設定的相關資訊，取得與 Amazon SES 組態設定相關聯的事件目的地清單，和列出與 Amazon SES 帳戶相關聯的所有組態集；若要取得 Identity Center 目錄屬性的清單，取得AWS IAM Identity Center許可集的詳細資訊，取得連接至指定 IAM Identity Center 許可集的 IAM 受管政策，取得 IAM Identity Center 執行個體的許可集，和取得 IAM Identity Center 資源的標籤。	2022 年 5 月 31 日
AWSConfigServiceRolePolicy – 新增 cloudformation:GetResource, cloudformation:ListResources, cloudtrail:GetEventDataStore, cloudtrail:ListEventDataStores, dax:DescribeParameterGroups, dax:DescribeParameters, dax:DescribeSubnetGroups, DMS:DescribeReplicationTasks, and organizations:ListPolicies	此政策現在授予許可，以取得所有或指定AWS CloudTrail事件資料存放區 (EDS) 的相關資訊、取得所有或指定AWS CloudFormation資源的相關資訊、取得 DynamoDB Accelerator (DAX) 參數群組或子網路群組的清單、取得目前區域中您帳戶複AWS Database Migration ServiceAWS DMS寫任務的相關資訊，以及取得AWS Organizations指定類型中的所有政策清單。	2022 年 4 月 7 日
AWS_ConfigRole – 新增 cloudformation:GetResource, cloudformation:ListResources, cloudtrail:GetEventDataStore, cloudtrail:ListEventDataStores, dax:DescribeParameterGroups, dax:DescribeParameters, dax:DescribeSubnetGroups, DMS:DescribeReplicationTasks, and organizations:ListPolicies	此政策現在授予許可，以取得所有或指定AWS CloudTrail事件資料存放區 (EDS) 的相關資訊、取得所有或指定AWS CloudFormation資源的相關資訊、取得 DynamoDB Accelerator (DAX) 參數群組或子網路群組的清單、取得目前區域中您帳戶複AWS Database Migration ServiceAWS DMS寫任務的相關資訊，以及取得AWS Organizations指定類型中的所有政策清單。	2022 年 4 月 7 日
AWSConfigServiceRolePolicy – 新增 backup-gateway:ListTagsForResource, backup-gateway:ListVirtualMachines, batch:DescribeComputeEnvironments, batch:DescribeJobQueues, batch:ListTagsForResource, dax:ListTags, dms:DescribeCertificates, dynamodb:DescribeGlobalTable, dynamodb:DescribeGlobalTableSettings, ec2:DescribeClientVpnAuthorizationRules, ec2:DescribeClientVpnEndpoints, ec2:DescribeDhcpOptions, ec2:DescribeFleets, ec2:DescribeNetworkAcls, ec2:DescribePlacementGroups, ec2:DescribeSpotFleetRequests, ec2:DescribeVolumeAttribute, ec2:DescribeVolumes, eks:DescribeFargateProfile, eks:ListFargateProfiles, eks:ListTagsForResource, fsx:ListTagsForResource, guardduty:ListOrganizationAdminAccounts, kms:ListAliases, opsworks:DescribeLayers, opsworks:DescribeStacks, opsworks:ListTags, rds:DescribeDBClusterParameterGroups, rds:DescribeDBClusterParameters, states:DescribeActivity, states:ListActivities, wafv2:GetRuleGroup, wafv2:ListRuleGroups, wafv2:ListTagsForResource, workspaces:DescribeConnectionAliases, workspaces:DescribeTags, and workspaces:DescribeWorkspaces	此政策現在支援AWS Backup、AWS Batch、DynamoDB Accelerator AWS Database Migration Service、Amazon DynamoDB、Amazon Elastic Compute Cloud (Amazon EC2)、Amazon Elastic Kubernetes Service、Amazon FSx、Amazon GuardDuty AWS Key Management Service、AWS OpsWorks Amazon Relational Database Service、AWS WAF V2 和 Amazon WorkSpaces 的其他許可。	2022 年 3 月 14 日
AWS_ConfigRole – 新增 backup-gateway:ListTagsForResource, backup-gateway:ListVirtualMachines, batch:DescribeComputeEnvironments, batch:DescribeJobQueues, batch:ListTagsForResource, dax:ListTags, dms:DescribeCertificates, dynamodb:DescribeGlobalTable, dynamodb:DescribeGlobalTableSettings, ec2:DescribeClientVpnAuthorizationRules, ec2:DescribeClientVpnEndpoints, ec2:DescribeDhcpOptions, ec2:DescribeFleets, ec2:DescribeNetworkAcls, ec2:DescribePlacementGroups, ec2:DescribeSpotFleetRequests, ec2:DescribeVolumeAttribute, ec2:DescribeVolumes, eks:DescribeFargateProfile, eks:ListFargateProfiles, eks:ListTagsForResource, fsx:ListTagsForResource, guardduty:ListOrganizationAdminAccounts, kms:ListAliases, opsworks:DescribeLayers, opsworks:DescribeStacks, opsworks:ListTags, rds:DescribeDBClusterParameterGroups, rds:DescribeDBClusterParameters, states:DescribeActivity, states:ListActivities, wafv2:GetRuleGroup, wafv2:ListRuleGroups, wafv2:ListTagsForResource, workspaces:DescribeConnectionAliases, workspaces:DescribeTags, and workspaces:DescribeWorkspaces	此政策現在支援AWS Backup、AWS Batch、DynamoDB Accelerator AWS Database Migration Service、Amazon DynamoDB、Amazon Elastic Compute Cloud (Amazon EC2)、Amazon Elastic Kubernetes Service、Amazon FSx、Amazon GuardDuty AWS Key Management Service、AWS OpsWorks Amazon Relational Database Service、AWS WAF V2 和 Amazon WorkSpaces 的其他許可。	2022 年 3 月 14 日
AWSConfigServiceRolePolicy – 新增 elasticbeanstalk:DescribeEnvironments, elasticbeanstalk:DescribeConfigurationSettings, account:GetAlternateContact, organizations:DescribePolicy, organizations:ListParents, organizations:ListPoliciesForTarget, es:GetCompatibleElasticsearchVersions, rds:DescribeOptionGroups, rds:DescribeOptionGroups, es:GetCompatibleVersions, codedeploy:GetDeploymentConfig, ecr-public:GetRepositoryPolicy, access-analyzer:GetArchiveRule, and ecs:ListTaskDefinitionFamilies	此政策現在授予的許可，可取得 Elastic Beanstalk 環境的詳細資訊和指定 Elastic Beanstalk 組態集設定的描述、取得 OpenSearch 或 Elasticsearch 版本的映射、描述資料庫可用的 Amazon RDS 選項群組，以及取得 CodeDeploy 部署組態的相關資訊。此政策現在也授予許可，以擷取連接至的指定替代聯絡人AWS 帳戶、擷取AWS Organizations政策的相關資訊、擷取 Amazon ECR 儲存庫政策、擷取封存AWS Config規則的相關資訊、擷取 Amazon ECS 任務定義系列清單、列出指定子 OU 或帳戶的根或父組織單位 (OUs)，以及列出連接至指定目標根、組織單位或帳戶的政策。	2022 年 2 月 10 日
AWS_ConfigRole – 新增 elasticbeanstalk:DescribeEnvironments, elasticbeanstalk:DescribeConfigurationSettings, account:GetAlternateContact, organizations:DescribePolicy, organizations:ListParents, organizations:ListPoliciesForTarget, es:GetCompatibleElasticsearchVersions, rds:DescribeOptionGroups, rds:DescribeOptionGroups, es:GetCompatibleVersions, codedeploy:GetDeploymentConfig, ecr-public:GetRepositoryPolicy, access-analyzer:GetArchiveRule, and ecs:ListTaskDefinitionFamilies	此政策現在授予的許可，可取得 Elastic Beanstalk 環境的詳細資訊和指定 Elastic Beanstalk 組態集設定的描述、取得 OpenSearch 或 Elasticsearch 版本的映射、描述資料庫可用的 Amazon RDS 選項群組，以及取得 CodeDeploy 部署組態的相關資訊。此政策現在也授予許可，以擷取連接至的指定替代聯絡人AWS 帳戶、擷取AWS Organizations政策的相關資訊、擷取 Amazon ECR 儲存庫政策、擷取封存AWS Config規則的相關資訊、擷取 Amazon ECS 任務定義系列清單、列出指定子 OU 或帳戶的根或父組織單位 (OUs)，以及列出連接至指定目標根、組織單位或帳戶的政策。	2022 年 2 月 10 日
AWSConfigServiceRolePolicy – 新增 logs:CreateLogStream, logs:CreateLogGroup, and logs:PutLogEvent	此政策現在授予的許可，可建立 Amazon CloudWatch 日誌群組和串流，並可將日誌寫入所建立的日誌串流。	2021 年 12 月 15 日
AWS_ConfigRole – 新增 logs:CreateLogStream, logs:CreateLogGroup, and logs:PutLogEvent	此政策現在授予的許可，可建立 Amazon CloudWatch 日誌群組和串流，並可將日誌寫入所建立的日誌串流。	2021 年 12 月 15 日
AWSConfigServiceRolePolicy – 新增 es:DescribeDomain, es:DescribeDomains, rds:DescribeDBParameters, and, elasticache:DescribeSnapshots	此政策現在授予的許可，可取得一或多個 Amazon OpenSearch Service (OpenSearch Service) 網域的詳細資訊，以及取得特定 Amazon Relational Database Service (Amazon RDS) 資料庫參數群組的詳細參數清單。此政策也授予可取得 Amazon ElastiCache 快照詳細資訊的許可。	2021 年 9 月 8 日
AWS_ConfigRole – 新增 es:DescribeDomain, es:DescribeDomains, rds:DescribeDBParameters, and, elasticache:DescribeSnapshots	此政策現在授予的許可，可取得一或多個 Amazon OpenSearch Service (OpenSearch Service) 網域的詳細資訊，以及取得特定 Amazon Relational Database Service (Amazon RDS) 資料庫參數群組的詳細參數清單。此政策也授予可取得 Amazon ElastiCache 快照詳細資訊的許可。	2021 年 9 月 8 日
AWSConfigServiceRolePolicy – 新增 logs:ListTagsLogGroup, states:ListTagsForResource, states:ListStateMachines, states:DescribeStateMachine和資源AWS類型的其他許可	此政策現在授予的許可，可列出日誌群組標籤、列出狀態機器標籤，以及列出所有狀態機器。此政策現在會授予可取得狀態機器詳細資訊的許可。此政策現在也支援 Amazon EC2 Systems Manager (SSM)、Amazon Elastic Container Registry、Amazon FSx、Amazon Data Firehose、Amazon Managed Streaming for Apache Kafka (Amazon MSK)AWS Global Accelerator、Amazon Relational Database Service (Amazon RDS)、Amazon Route 53、Amazon SageMaker AI、Amazon Simple Notification Service AWS Database Migration Service、和的其他許可AWS Storage Gateway。	2021 年 7 月 28 日
AWS_ConfigRole – 新增AWS資源類型的 l ogs:ListTagsLogGroup, states:ListTagsForResource, states:ListStateMachines, states:DescribeStateMachine和其他許可	此政策現在授予的許可，可列出日誌群組標籤、列出狀態機器標籤，以及列出所有狀態機器。此政策現在會授予可取得狀態機器詳細資訊的許可。此政策現在也支援 Amazon EC2 Systems Manager (SSM)、Amazon Elastic Container Registry、Amazon FSx、Amazon Data Firehose、Amazon Managed Streaming for Apache Kafka (Amazon MSK)AWS Global Accelerator、Amazon Relational Database Service (Amazon RDS)、Amazon Route 53、Amazon SageMaker AI、Amazon Simple Notification Service AWS Database Migration Service、和的其他許可AWS Storage Gateway。	2021 年 7 月 28 日
AWSConfigServiceRolePolicy – 新增AWS資源類型的 ssm:DescribeDocumentPermission和其他許可	此政策現在會授予可檢視AWS Systems Manager文件許可和 IAM Access Analyzer 相關資訊的許可。此政策現在支援 Amazon Kinesis、Amazon ElastiCache、Amazon EMR AWS Network Firewall、Amazon Route 53 和 Amazon Relational Database Service (Amazon RDS) 的其他AWS資源類型。這些許可變更允許AWS Config叫用支援這些資源類型所需的唯讀 APIs。此政策現在也支援篩選 lambda-inside-vpc 受管規則的 Lambda AWS Config@Edge 函數。	2021 年 6 月 8 日
AWS_ConfigRole – 新增AWS資源類型的 ssm:DescribeDocumentPermission和其他許可	此政策現在會授予可檢視AWS Systems Manager文件許可和 IAM Access Analyzer 相關資訊的許可。此政策現在支援 Amazon Kinesis、Amazon ElastiCache、Amazon EMR AWS Network Firewall、Amazon Route 53 和 Amazon Relational Database Service (Amazon RDS) 的其他AWS資源類型。這些許可變更允許AWS Config叫用支援這些資源類型所需的唯讀 APIs。此政策現在也支援篩選 lambda-inside-vpc 受管規則的 Lambda AWS Config@Edge 函數。	2021 年 6 月 8 日
AWSConfigServiceRolePolicy - 新增可向 API Gateway 發出唯讀 GET 呼叫的 apigateway:GET 許可，以及可調用 Amazon S3 唯讀 API 的 s3:GetAccessPointPolicy 許可和 s3:GetAccessPointPolicyStatus 許可	此政策現在授予許可，AWS Config允許對 API Gateway 進行唯讀 GET 呼叫，以支援 API Gateway 的AWS Config規則。此政策也會新增許可，AWS Config允許叫用 Amazon Simple Storage Service (Amazon S3) 唯讀 APIs，這是支援新`AWS::S3::AccessPoint`資源類型的必要項目。	2021 年 5 月 10 日
AWS_ConfigRole – 新增可向 API Gateway 發出唯讀 GET 呼叫的 apigateway:GET 許可，以及可調用 Amazon S3 唯讀 API 的 s3:GetAccessPointPolicy 許可和 s3:GetAccessPointPolicyStatus 許可	此政策現在授予許可，AWS Config允許對 API Gateway 進行唯讀 GET 呼叫，以支援適用於 API Gateway AWS Config的。此政策也會新增許可，AWS Config允許叫用 Amazon Simple Storage Service (Amazon S3) 唯讀 APIs，這是支援新`AWS::S3::AccessPoint`資源類型的必要項目。	2021 年 5 月 10 日
AWSConfigServiceRolePolicy – 新增AWS資源類型的ssm:ListDocuments許可和其他許可	此政策現在會授予可檢視AWS Systems Manager指定文件相關資訊的許可。此政策現在也支援 Amazon Elastic File System AWS Backup、Amazon ElastiCache、Amazon Simple Storage Service (Amazon S3)、Amazon Elastic Compute Cloud (Amazon EC2)AWS Database Migration Service、Amazon Kinesis、Amazon SageMaker AI 和 Amazon Route 53 的其他AWS資源類型。這些許可變更允許AWS Config叫用支援這些資源類型所需的唯讀 APIs。	2021 年 4 月 1 日
AWS_ConfigRole – 新增AWS資源類型的ssm:ListDocuments許可和其他許可	此政策現在會授予可檢視AWS Systems Manager指定文件相關資訊的許可。此政策現在也支援 Amazon Elastic File System AWS Backup、Amazon ElastiCache、Amazon Simple Storage Service (Amazon S3)、Amazon Elastic Compute Cloud (Amazon EC2)AWS Database Migration Service、Amazon Kinesis、Amazon SageMaker AI 和 Amazon Route 53 的其他AWS資源類型。這些許可變更允許AWS Config叫用支援這些資源類型所需的唯讀 APIs。	2021 年 4 月 1 日
`AWSConfigRole` 已棄用	`AWSConfigRole` 已棄用。替換政策是 `AWS_ConfigRole`。	2021 年 4 月 1 日
AWS Config已開始追蹤變更	AWS Config開始追蹤其AWS受管政策的變更。	2021 年 4 月 1 日

您的瀏覽器已停用或無法使用 Javascript。

您必須啟用 Javascript，才能使用 AWS 文件。請參閱您的瀏覽器說明頁以取得說明。

文件慣用形式

身分型政策範例

IAM 角色的許可

AWS的 受管政策AWS Config