What's new?
- The
Approved > Usage
policy for resource types will now default toApproved
instead ofApproved if AWS > {service} > Enabled
.
Bug fixes
- In version 5.25.0, we added support to ignore permission errors on a bucket via the CMDB policy
Enforce: Enabled but ignore permission errors
. However, the CMDB control previously ignored permission errors only on theHeadBucket
operation and still entered an error state for permission errors on sub-API calls. The CMDB control will now ignore all sub-API calls if theHeadBucket
operation is denied access. If the HeadBucket operation is successful, the control will attempt to make all sub-API calls and ignore access denied errors if encountered.