AWS drs documentation change
Summary
Replaced inline IAM policy JSON with link to AWS Managed Policy Reference Guide
Security assessment
Documentation restructuring to reference centralized policy documentation, no security-related modifications or additions detected
Diff
diff --git a/drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryReplicationServerPolicy.md b/drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryReplicationServerPolicy.md index 807f89b05..cc8dc2e82 100644 --- a//drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryReplicationServerPolicy.md +++ b//drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryReplicationServerPolicy.md @@ -13,92 +13 @@ This policy allows the AWS Elastic Disaster Recovery (AWS DRS) replication serve -This policy includes the following permissions. - - - { - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "DRSReplicationServerPolicy1", - "Effect": "Allow", - "Action": [ - "drs:SendClientMetricsForDrs", - "drs:SendClientLogsForDrs" - ], - "Resource": "*" - }, - { - "Sid": "DRSReplicationServerPolicy2", - "Effect": "Allow", - "Action": [ - "drs:GetChannelCommandsForDrs", - "drs:SendChannelCommandResultForDrs" - ], - "Resource": "*" - }, - { - "Sid": "DRSReplicationServerPolicy3", - "Effect": "Allow", - "Action": [ - "drs:GetAgentSnapshotCreditsForDrs", - "drs:DescribeReplicationServerAssociationsForDrs", - "drs:DescribeSnapshotRequestsForDrs", - "drs:BatchDeleteSnapshotRequestForDrs", - "drs:NotifyAgentAuthenticationForDrs", - "drs:BatchCreateVolumeSnapshotGroupForDrs", - "drs:UpdateAgentReplicationProcessStateForDrs", - "drs:NotifyAgentReplicationProgressForDrs", - "drs:NotifyAgentConnectedForDrs", - "drs:NotifyAgentDisconnectedForDrs", - "drs:NotifyVolumeEventForDrs", - "drs:SendVolumeStatsForDrs" - ], - "Resource": "*" - }, - { - "Sid": "DRSReplicationServerPolicy4", - "Effect": "Allow", - "Action": [ - "ec2:DescribeInstances", - "ec2:DescribeSnapshots" - ], - "Resource": "*" - }, - { - "Sid": "DRSReplicationServerPolicy5", - "Effect": "Allow", - "Action": [ - "ec2:CreateSnapshot" - ], - "Resource": "arn:aws:ec2:*:*:volume/*", - "Condition": { - "Null": { - "aws:ResourceTag/AWSElasticDisasterRecoveryManaged": "false" - } - } - }, - { - "Sid": "DRSReplicationServerPolicy6", - "Effect": "Allow", - "Action": [ - "ec2:CreateSnapshot" - ], - "Resource": "arn:aws:ec2:*:*:snapshot/*", - "Condition": { - "Null": { - "aws:RequestTag/AWSElasticDisasterRecoveryManaged": "false" - } - } - }, - { - "Sid": "DRSReplicationServerPolicy7", - "Effect": "Allow", - "Action": "ec2:CreateTags", - "Resource": "*", - "Condition": { - "StringEquals": { - "ec2:CreateAction": "CreateSnapshot" - } - } - } - ] - } - +To view the policy permission details see [AWSElasticDisasterRecoveryReplicationServerPolicy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSElasticDisasterRecoveryReplicationServerPolicy.html) in the AWS Managed Policy Reference Guide.