AWS drs documentation change

Service: drs · 2025-04-11 · Documentation low

File: drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryReadOnlyAccess.md

Summary

Replaced inline IAM policy JSON with link to AWS Managed Policy Reference Guide

Security assessment

Change removes detailed policy documentation in favor of external reference, no evidence of addressing security vulnerabilities or adding security features

Diff

diff --git a/drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryReadOnlyAccess.md b/drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryReadOnlyAccess.md
index 20ac67f60..906541b2e 100644
--- a//drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryReadOnlyAccess.md
+++ b//drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryReadOnlyAccess.md
@@ -13,90 +13 @@ This policy provides permissions to all read-only public APIs of AWS Elastic Dis
-This policy includes the following permissions.
-    
-    
-    {
-    	"Version": "2012-10-17",
-    	"Statement": [
-    		{
-    			"Sid": "DRSReadOnlyAccess1",
-    			"Effect": "Allow",
-    			"Action": [
-    				"drs:DescribeJobLogItems",
-    				"drs:DescribeJobs",
-    				"drs:DescribeRecoveryInstances",
-    				"drs:DescribeRecoverySnapshots",
-    				"drs:DescribeReplicationConfigurationTemplates",
-    				"drs:DescribeSourceServers",
-    				"drs:GetFailbackReplicationConfiguration",
-    				"drs:GetLaunchConfiguration",
-    				"drs:GetReplicationConfiguration",
-    				"drs:ListExtensibleSourceServers",
-    				"drs:ListStagingAccounts",
-    				"drs:ListTagsForResource",
-    				"drs:ListLaunchActions"
-    			],
-    			"Resource": "*"
-    		},
-    		{
-    			"Sid": "DRSReadOnlyAccess2",
-    			"Effect": "Allow",
-    			"Action": [
-    				"ec2:DescribeInstances",
-    				"ec2:DescribeLaunchTemplateVersions",
-    				"ec2:DescribeSecurityGroups",
-    				"ec2:DescribeSubnets",
-                    		"ec2:GetInstanceTypesFromInstanceRequirements"
-                ],
-    			"Resource": "*"
-    		},
-    		{
-    			"Sid": "DRSReadOnlyAccess4",
-    			"Effect": "Allow",
-    			"Action": "iam:ListRoles",
-    			"Resource": "*"
-    		},
-    		{
-    			"Sid": "DRSReadOnlyAccess5",
-    			"Effect": "Allow",
-    			"Action": "ssm:ListCommandInvocations",
-    			"Resource": "*"
-    		},
-    		{
-    			"Sid": "DRSReadOnlyAccess6",
-    			"Effect": "Allow",
-    			"Action": "ssm:GetParameter",
-    			"Resource": "arn:aws:ssm:*:*:parameter/ManagedByAWSElasticDisasterRecovery-*"
-    		},
-    		{
-    			"Sid": "DRSReadOnlyAccess7",
-    			"Effect": "Allow",
-    			"Action": [
-    				"ssm:DescribeDocument",
-    				"ssm:GetDocument"
-    			],
-    			"Resource": [
-    				"arn:aws:ssm:*:*:document/AWS-CreateImage",
-    				"arn:aws:ssm:*:*:document/AWSMigration-ValidateNetworkConnectivity",
-    				"arn:aws:ssm:*:*:document/AWSMigration-VerifyMountedVolumes",
-    				"arn:aws:ssm:*:*:document/AWSMigration-ValidateHttpResponse",
-    				"arn:aws:ssm:*:*:document/AWSMigration-ValidateDiskSpace",
-    				"arn:aws:ssm:*:*:document/AWSMigration-VerifyProcessIsRunning",
-    				"arn:aws:ssm:*:*:document/AWSMigration-LinuxTimeSyncSetting",
-    				"arn:aws:ssm:*:*:document/AWSEC2-ApplicationInsightsCloudwatchAgentInstallAndConfigure"
-    			]
-    		},
-    		{
-    			"Sid": "DRSReadOnlyAccess8",
-    			"Effect": "Allow",
-    			"Action": [
-    				"ssm:GetAutomationExecution"
-    			],
-    			"Resource": "arn:aws:ssm:*:*:automation-execution/*",
-    			"Condition": {
-    				"Null": {
-    					"aws:ResourceTag/AWSElasticDisasterRecoveryManaged": "false"
-    				}
-    			}
-    		}
-    	]
-    }
-                    
+To view the policy permission details see [AWSElasticDisasterRecoveryReadOnlyAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSElasticDisasterRecoveryReadOnlyAccess.html) in the AWS Managed Policy Reference Guide.