AWS First Steps
LanguageEnglish
New feature

AWS Service Reference Information now supports global condition keys, service names, and data plane classification

AWS expands service reference information to automate IAM policy management, adding global condition keys, service names, and data plane operation identification.

AWS has extended programmatic service reference information to automate IAM policy management and align policies with service updates. The reference includes global condition keys under the aws: prefix in a single machine-readable file, a ServiceName field mapping service identifiers to readable names, and an IsDataPlane property identifying data plane operations. This enables automatic retrieval and integration into existing policy management tools and processes, available at no additional cost. For details, see the programmatic service reference documentation.

Why it matters

This update helps automate IAM policy management and align policies with the latest service updates, useful for users managing security and access control.

Read the original AWS announcement

Related articles and terms

AWS IAM Fine-Grained Access Control - How Policy-Based Design Achieves the Principle of Least PrivilegeExplore the design philosophy behind AWS IAM's policy-based access control and compare its granularity with Azure RBAC and GCP IAM in concrete terms.Designing Identity and Access Management - Achieving Zero Trust Security with IAMLearn access management design techniques with AWS IAM, including the principle of least privilege, policy design, and achieving zero trust security through Cognito integration.IAM Policy Evaluation Logic Explained - How Implicit Deny Loses to Explicit AllowA step-by-step explanation of how IAM evaluates requests to allow or deny them, covering the priority of implicit deny, explicit allow, and explicit deny, as well as intersection logic for SCPs, permission boundaries, and session policies.AWS IAMAn authentication and authorization service for securely controlling access to AWS resources, providing fine-grained access management through users, groups, roles, and policiesIAM Access AnalyzerA service that automatically analyzes resource policies on S3 buckets, IAM roles, and more to detect external access and unused permissions, strengthening your security posture