AWS fis documentation change
Summary
Added support for ManagedResources (EKS clusters, EC2 Load Balancers, Auto Scaling groups) in ARC zonal shift and included an example action for starting ARC zonal autoshift
Security assessment
Changes focus on fault injection testing and zonal resilience features rather than addressing security vulnerabilities or documenting security controls
Diff
diff --git a/fis/latest/userguide/action-sequence.md b/fis/latest/userguide/action-sequence.md index 9200e1765..9b3e2e5ee 100644 --- a//fis/latest/userguide/action-sequence.md +++ b//fis/latest/userguide/action-sequence.md @@ -130,2 +129,0 @@ AWS FIS actions support the following resource types for action targets: - * **Tables** – Amazon DynamoDB global tables - @@ -133,0 +132,2 @@ AWS FIS actions support the following resource types for action targets: + * **ManagedResources** – Amazon EKS clusters, Amazon EC2 Application and Network Load Balancers, and Amazon EC2 Auto Scaling groups that are enabled for ARC zonal shift. + @@ -145,0 +146,2 @@ AWS FIS actions support the following resource types for action targets: + * **Tables** – Amazon DynamoDB global tables + @@ -178,0 +181,2 @@ The following are example actions. + * Start ARC zonal autoshift + @@ -250,0 +255,41 @@ The following action terminates 50% of the EC2 instances in the EKS cluster iden +###### Example: Start ARC zonal autoshift + +The following action starts an ARC Zonal autoshift that shifts managed resources away from `az-in-parameters` for `duration-in-parameteres`. The resource type `ManagedResources` is used as a key for the target name in AWS FIS experiment template. + + + { + "description": "aaa", + "targets": { + "ManagedResources-Target-1": { + "resourceType": "aws:arc:zonal-shift-managed-resource", + "resourceArns": [ + "arn:aws:elasticloadbalancing:us-east-1:0124567890:loadbalancer/app/application/11223312312516", + ], + "selectionMode": "ALL" + } + }, + "actions": { + "arc": { + "actionId": "aws:arc:start-zonal-autoshift", + "parameters": { + "availabilityZoneIdentifier": "us-east-1a", + "duration": "PT1M" + }, + "targets": { + "ManagedResources": "ManagedResources-Target-1" + } + } + }, + "stopConditions": [ + { + "source": "none" + } + ], + "roleArn": "arn:aws:iam::718579638765:role/fis", + "tags": {}, + "experimentOptions": { + "accountTargeting": "single-account", + "emptyTargetResolutionMode": "fail" + } + } +