AWS drs documentation change
Summary
Replaced inline IAM policy JSON with reference link to AWS Managed Policy Guide
Security assessment
Change removes cross-account replication policy details and references external documentation. No evidence of security issue remediation.
Diff
diff --git a/drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryCrossAccountReplicationPolicy.md b/drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryCrossAccountReplicationPolicy.md index fdcf555e2..3c584106f 100644 --- a//drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryCrossAccountReplicationPolicy.md +++ b//drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryCrossAccountReplicationPolicy.md @@ -11,36 +11 @@ This policy allows AWS Elastic Disaster Recovery (DRS) to support cross-account -This policy includes the following permissions. - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "CrossAccountPolicy1", - "Effect": "Allow", - "Action": [ - "ec2:DescribeVolumes", - "ec2:DescribeVolumeAttribute", - "ec2:DescribeInstances", - "drs:DescribeSourceServers", - "drs:DescribeReplicationConfigurationTemplates", - "drs:CreateSourceServerForDrs" - ], - "Resource": "*" - }, - { - "Sid": "CrossAccountPolicy2", - "Effect": "Allow", - "Action": [ - "drs:TagResource" - ], - "Resource": "arn:aws:drs:*:*:source-server/*", - "Condition": { - "StringEquals": { - "drs:CreateAction": "CreateSourceServerForDrs" - } - } - } - ] - } - - +To view the policy permission details see [AWSElasticDisasterRecoveryCrossAccountReplicationPolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSElasticDisasterRecoveryCrossAccountReplicationPolicy.html) in the AWS Managed Policy Reference Guide.