Concise summaries of official AWS update announcements for AWS IAM.
Information as of November 3, 2026.
AWS expands service reference information to automate IAM policy management, adding global condition keys, service names, and data plane operation identification.
AWS IAM outbound identity federation now supports interface VPC endpoints for OIDC discovery APIs, enabling private access within VPCs using AWS PrivateLink
AWS introduces a simplified onboarding experience that automates initial setup and provides sensible defaults, allowing developers to start building immediately with their ideas.
AWS now serves root user sign-in across US East (N. Virginia), US East (Ohio), and US West (Oregon), distributing sign-in traffic across all three Regions. This reduces reliance on US East (N. Virginia) and improves resiliency during service disruptions.
IAM Roles Anywhere provides a plugin for the AWS SDK for Java v2, allowing workloads running outside AWS to obtain temporary AWS credentials directly within the Java application process, eliminating the need for a separate credential helper process.
AWS partners can now access Partner Central agents from existing tools using OAuth via AWS Sign-In, simplifying authorization without additional software.
AWS IAM increases the default quota for managed policies per role from 10 to 20, reducing the need for service quota requests
AWS IAM now allows AWS workloads in the European Sovereign Cloud (Germany) Region to authenticate securely with external services using short-lived JWTs, eliminating the need for long-term credentials or complex workarounds.
IAM Policy Autopilot can now generate baseline IAM policies directly from Terraform plan files, producing policies scoped to resource CRUD functions with specific ARNs when possible
AWS IAM introduces role manager, automatically setting up required IAM roles when configuring supported services in the console, reusing existing roles when possible and allowing full management via IAM console.
The IAM Policy Simulator is now integrated into the IAM console, adding support for testing SCPs, condition key effects, and policy exclusions
The AWS MCP Server now allows AI agents to connect directly using AWS Sign-In with industry-standard OAuth, eliminating the need for additional authentication software.
AWS Sign-in supports resource-based policies and resource control policies for the AWS Management Console, allowing you to restrict console sign-in to expected networks. These policies can be applied organization-wide through AWS Organizations.
No updates match the selected filters. Try changing them.