AWS drs documentation change

Service: drs · 2025-04-11 · Documentation medium

File: drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryAgentPolicy.md

Summary

Replaced inline IAM policy JSON with reference to managed policy guide and added 'Permissions details' section

Security assessment

Restructured existing security documentation about IAM policies without changing permissions. The update improves documentation clarity but doesn't address a specific security vulnerability.

Diff

diff --git a/drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryAgentPolicy.md b/drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryAgentPolicy.md
index 1f9ed34d3..adcee6dae 100644
--- a//drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryAgentPolicy.md
+++ b//drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryAgentPolicy.md
@@ -10,0 +11 @@ This policy gives the AWS Replication Agent, which is used with AWS Elastic Disa
+**Permissions details**
@@ -12,31 +13 @@ This policy gives the AWS Replication Agent, which is used with AWS Elastic Disa
-    {
-    	"Version": "2012-10-17",
-    	"Statement": [
-    		{
-    			"Sid": "DRSAgentPolicy1",
-    			"Effect": "Allow",
-    			"Action": [
-    				"drs:SendAgentMetricsForDrs",
-    				"drs:SendAgentLogsForDrs",
-    				"drs:UpdateAgentSourcePropertiesForDrs",
-    				"drs:UpdateAgentReplicationInfoForDrs",
-    				"drs:UpdateAgentConversionInfoForDrs",
-    				"drs:GetAgentCommandForDrs",
-    				"drs:GetAgentConfirmedResumeInfoForDrs",
-    				"drs:GetAgentRuntimeConfigurationForDrs",
-    				"drs:UpdateAgentBacklogForDrs",
-    				"drs:GetAgentReplicationInfoForDrs",
-    				"drs:IssueAgentCertificateForDrs"
-    			],
-    			"Resource": "arn:aws:drs:*:*:source-server/${aws:SourceIdentity}"
-    		},
-    		{
-    			"Sid": "DRSAgentPolicy2",
-    			"Effect": "Allow",
-    			"Action": [
-    				"drs:GetAgentInstallationAssetsForDrs"
-    			],
-    			"Resource": "*"
-    		}
-    	]
-    } 
+To view the policy permission details see [AWSElasticDisasterRecoveryAgentPolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSElasticDisasterRecoveryAgentPolicy.html) in the AWS Managed Policy Reference Guide.