AWS drs documentation change
Summary
Replaced inline IAM policy JSON with reference link to AWS Managed Policy Guide
Security assessment
Change removes detailed EC2 instance policy permissions and points to external reference. No security-related modifications indicated.
Diff
diff --git a/drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryEc2InstancePolicy.md b/drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryEc2InstancePolicy.md index 9c180ece0..23b859d27 100644 --- a//drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryEc2InstancePolicy.md +++ b//drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryEc2InstancePolicy.md @@ -11,82 +11 @@ This policy allows installing and using the AWS Replication Agent, which is used -This policy includes the following permissions. - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "DRSEc2InstancePolicy1", - "Effect": "Allow", - "Action": [ - "drs:GetAgentInstallationAssetsForDrs", - "drs:SendClientLogsForDrs", - "drs:SendClientMetricsForDrs", - "drs:CreateSourceServerForDrs", - "drs:CreateSourceNetwork" - ], - "Resource": "*" - }, - { - "Sid": "DRSEc2InstancePolicy2", - "Effect": "Allow", - "Action": [ - "drs:TagResource" - ], - "Resource": "arn:aws:drs:*:*:source-server/*", - "Condition": { - "StringEquals": { - "drs:CreateAction": "CreateSourceServerForDrs" - } - } - }, - { - "Sid": "DRSEc2InstancePolicy3", - "Effect": "Allow", - "Action": [ - "drs:TagResource" - ], - "Resource": "arn:aws:drs:*:*:source-network/*", - "Condition": { - "StringEquals": { - "drs:CreateAction": "CreateSourceNetwork" - } - } - }, - { - "Sid": "DRSEc2InstancePolicy4", - "Effect": "Allow", - "Action": [ - "drs:SendAgentMetricsForDrs", - "drs:SendAgentLogsForDrs", - "drs:UpdateAgentSourcePropertiesForDrs", - "drs:UpdateAgentReplicationInfoForDrs", - "drs:UpdateAgentConversionInfoForDrs", - "drs:GetAgentCommandForDrs", - "drs:GetAgentConfirmedResumeInfoForDrs", - "drs:GetAgentRuntimeConfigurationForDrs", - "drs:UpdateAgentBacklogForDrs", - "drs:GetAgentReplicationInfoForDrs" - ], - "Resource": "arn:aws:drs:*:*:source-server/*" - }, - { - "Sid": "DRSEc2InstancePolicy5", - "Effect": "Allow", - "Action": [ - "sts:AssumeRole", - "sts:TagSession" - ], - "Resource": [ - "arn:aws:iam::*:role/service-role/DRSCrossAccountAgentAuthorizedRole_*" - ], - "Condition": { - "StringLike": { - "aws:RequestTag/SourceInstanceARN": "${ec2:SourceInstanceARN}" - }, - "ForAnyValue:StringEquals": { - "sts:TransitiveTagKeys": "SourceInstanceARN" - } - } - } - ] - } +To view the policy permission details see [AWSElasticDisasterRecoveryEc2InstancePolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSElasticDisasterRecoveryEc2InstancePolicy.html) in the AWS Managed Policy Reference Guide.