AWS fsx documentation change
Summary
Added ec2:DescribeNetworkInterfaces permission description and policy change note for AmazonFSxConsoleReadOnlyAccess
Security assessment
Documents expanded IAM permissions for network interface visibility without indicating resolution of a security issue. Updates security feature documentation.
Diff
diff --git a/fsx/latest/FileCacheGuide/security-iam-awsmanpol.md index bd48263bb..c01251f91 100644 --- a/fsx/latest/FileCacheGuide/security-iam-awsmanpol.md +++ b/fsx/latest/FileCacheGuide/security-iam-awsmanpol.md @@ -121 +121,3 @@ This policy includes the following permissions. - * To provide enhanced security group validation of all security groups that can be used with a VPC. + * Allows principals to provide enhanced security group validation of all security groups that can be used with a VPC. + + * Allows principals to view the elastic network interfaces associated with an Amazon FSx file system. @@ -154,0 +157 @@ Change | Description | Date +AmazonFSxConsoleReadOnlyAccess – Update to an existing policy | Amazon FSx added new permission, `ec2:DescribeNetworkInterfaces` that allows principals to view the elastic network interfaces associated with their file system. | February 25, 2025