feat(changelog): add new entry

Changelog bot · web-flow · commit 6c5ad92f4756 · 2025-10-15T13:28:37.000Z
diff --git a/changelog/october2025/2025-10-15-jobs-changed-serverless-jobs-enforced-cross-product-per.mdx b/changelog/october2025/2025-10-15-jobs-changed-serverless-jobs-enforced-cross-product-per.mdx
@@ -0,0 +1,14 @@
+---
+title: Serverless Jobs enforced cross-product permissions
+status: changed
+date: 2025-10-15
+category: serverless
+product: jobs
+---
+
+When starting a Job Definition with `ServerlessJobsFullAccess` permission:
+- If the Job Definition uses an image from **Container Registry**, add at least `ContainerRegistryReadOnly` permission.
+- If the Job Definition consumes data from **Secret Manager**; add at least `SecretManagerSecretAccess` permission.
+
+
+
