AWS fsx documentation change
Summary
Added description of ec2:DescribeNetworkInterfaces permission and updated policy change history
Security assessment
Documents expanded permissions in managed policies for better visibility of network resources, enhancing security documentation without evidence of addressing a specific vulnerability.
Diff
diff --git a/fsx/latest/OpenZFSGuide/security-iam-awsmanpol.md index 69e15fafa..b573d02f7 100644 --- a/fsx/latest/OpenZFSGuide/security-iam-awsmanpol.md +++ b/fsx/latest/OpenZFSGuide/security-iam-awsmanpol.md @@ -119 +119,3 @@ This policy includes the following permissions. - * To provide enhanced security group validation of all security groups that can be used with a VPC. + * Allows principals to provide enhanced security group validation of all security groups that can be used with a VPC. + + * Allows principals to view the elastic network interfaces associated with an Amazon FSx file system. @@ -150,0 +153 @@ Change | Description | Date +AmazonFSxConsoleReadOnlyAccess – Update to an existing policy | Amazon FSx added new permission, `ec2:DescribeNetworkInterfaces` that allows principals to view the elastic network interfaces associated with their file system. | February 25, 2025