AWS fis documentation change
Summary
Added 'Recovery action' section with details about aws:arc:start-zonal-autoshift action including parameters, permissions, and resource targeting
Security assessment
Documents a new recovery action for AZ impairment mitigation through traffic shifting. While related to system reliability, there is no evidence of addressing security vulnerabilities or describing security-specific features.
Diff
diff --git a/fis/latest/userguide/fis-actions-reference.md b/fis/latest/userguide/fis-actions-reference.md index 26a90ca96..9429c1854 100644 --- a/fis/latest/userguide/fis-actions-reference.md +++ b/fis/latest/userguide/fis-actions-reference.md @@ -5 +5 @@ -Fault injection actionsWait actionAmazon CloudWatch actionsAmazon DynamoDB actionsAmazon EBS actionsAmazon EC2 actionsAmazon ECS actionsAmazon EKS actionsAmazon ElastiCache actionsAWS Lambda actionsNetwork actionsAmazon RDS actionsAmazon S3 actionsSystems Manager actions +Fault injection actionsRecovery actionWait actionAmazon CloudWatch actionsAmazon DynamoDB actionsAmazon EBS actionsAmazon EC2 actionsAmazon ECS actionsAmazon EKS actionsAmazon ElastiCache actionsAWS Lambda actionsNetwork actionsAmazon RDS actionsAmazon S3 actionsSystems Manager actions @@ -18,0 +19,2 @@ For more information on how AWS FIS actions work, see [Actions for AWS FIS](./ac + * Recovery action + @@ -163,0 +166,51 @@ Injects Unavailable errors into requests made by the target IAM role. The specif +## Recovery action + +Recovery actions are performed to mitigate risk or protect applications after impairment. + +AWS FIS supports the following recovery actions. + +### aws:arc:start-zonal-autoshift + +Automatically shifts traffic for supported resources away from a potentially impaired Availability Zone (AZ) and reroutes them to healthy AZs in the same AWS Region. This allows for experiencing zonal autoshift through FIS. Zonal autoshift is a capability in ARC that allows AWS to shift traffic for a resource away from an AZ, on your behalf, when AWS determines that there is an impairment that could potentially affect customers in the AZ. + +###### Resource type + + * **aws:arc:zonal-shift-managed-resource** + +Zonal shift managed resources are resource types including Amazon EKS clusters, Amazon EC2 Application and Network Load Balancers, and Amazon EC2 Auto Scaling groups that can be enabled for ARC zonal autoshift. For more information, see [supported resources](https://docs.aws.amazon.com/r53recovery/latest/dg/arc-zonal-shift.resource-types.html) and [enabling zonal autoshift resources](https://docs.aws.amazon.com/r53recovery/latest/dg/arc-zonal-autoshift.start-cancel.html) in the _ARC Developer Guide_. + + + + +###### Parameters + + * **duration** – The length of time for which traffic will be shifted. In the AWS FIS API, the value is a string in ISO 8601 format. For example, PT1M represents one minute. In the AWS FIS console, you enter the number of seconds, minutes, or hours. + + * **availabilityZoneIdentifier** – Traffic moves away from this AZ. This can be an AZ name (us-east-1a) or AZ ID (use1-az1). + + * **managedResourceTypes** – The resource types from which traffic will be shifted, separated my commas. Possible options are `ASG` (Auto Scaling Group), `ALB` (Application Load Balancer), `NLB` (Network Load Balancer), and `EKS` (Amazon EKS). + + * **zonalAutoshiftStatus** – The `zonalAutoshiftStatus` status of the resources that you want to target. Possible options are `ENABLED` `DISABLED`, and `ANY`. The default is `ENABLED`. + + + + +###### Permissions + + * arc-zonal-shift:StartZonalShift + + * arc-zonal-shift:GetManagedResource + + * arc-zonal-shift:UpdateZonalShift + + * arc-zonal-shift:CancelZonalShift + + * arc-zonal-shift:ListManagedResources + + * autoscaling:DescribeTags + + * tag:GetResources + + + + @@ -231 +284 @@ The following statement will be dynamically appended to the policy for the targe - "Sid": "DoNotModifyFisDynamoDbPauseReplicationEXPxxxxxxxxxxxxxxx" + "Sid": "DoNotModifyFisDynamoDbPauseReplicationEXPxxxxxxxxxxxxxxx", @@ -264 +317 @@ The following statement will be dynamically appended to the policy for stream fo - "Sid": "DoNotModifyFisDynamoDbPauseReplicationEXPxxxxxxxxxxxxxxx" + "Sid": "DoNotModifyFisDynamoDbPauseReplicationEXPxxxxxxxxxxxxxxx",