Skip to content

Cloud Changelog

AWS IAM changelog 2025

20 announcements, 2025

All AWS IAM changes · 45 announcements since January 2025 · 6 GA · 1 Region expansion

Free. One email a day, only on days when something you follow has an announcement, or one a week if you switch it in your preferences. You confirm your email with a one-time code; there is no password.

RSS feed for AWS IAM

November 20255

Nov 30
Open source MCP server and CLI generate baseline IAM policies from application code
Nov 19
Exchange IAM credentials for short-lived JWTs to authenticate AWS workloads with external services
Nov 19
New global condition key enforces region-based access control for PrivateLink requests
Nov 19
Delegate limited, temporary access to Amazon and AWS Partner products without persistent IAM rolesGA
Nov 4
Maps SDK operations to the IAM permissions needed to call them, at no extra cost

September 20251

Sep 4
Three new condition keys control creation, expiration and type of Bedrock API keys

August 20251

Aug 29
Three new global condition keys for network perimeter controls: aws:VpceAccount, aws:VpceOrgPaths, aws:VpceOrgID

June 20255

April 20251

Apr 22
Additional resource-level permissions for copying snapshots, with 6 EC2 condition keys for CopySnapshot

March 20253

February 20253

January 20251

Jan 28
New codebuild:projectArn and codebuild:buildArn IAM condition keys restrict API calls from builds

All AWS product changelogs