AWS fsx documentation change
Summary
Added ec2:DescribeNetworkInterfaces permission description and policy change note for AmazonFSxConsoleReadOnlyAccess
Security assessment
Documents enhanced security group validation permissions without indicating resolution of a security vulnerability. Updates security feature documentation.
Diff
diff --git a/fsx/latest/ONTAPGuide/security-iam-awsmanpol.md index f2b552c7d..57c5067b8 100644 --- a/fsx/latest/ONTAPGuide/security-iam-awsmanpol.md +++ b/fsx/latest/ONTAPGuide/security-iam-awsmanpol.md @@ -119 +119,3 @@ This policy includes the following permissions. - * To provide enhanced security group validation of all security groups that can be used with a VPC. + * Allows principals to provide enhanced security group validation of all security groups that can be used with a VPC. + + * Allows principals to view the elastic network interfaces associated with an Amazon FSx file system. @@ -152,0 +155 @@ Change | Description | Date +AmazonFSxConsoleReadOnlyAccess – Update to an existing policy | Amazon FSx added new permission, `ec2:DescribeNetworkInterfaces` that allows principals to view the elastic network interfaces associated with their file system. | February 25, 2025