AWS fsx documentation change

Service: fsx · 2025-04-11 · Documentation low

File: fsx/latest/OpenZFSGuide/custom-snapshot-schedule.md

Summary

Removed detailed example of custom IAM policy for scoped-down access to snapshot scheduling resources

Security assessment

The change removes a policy example but doesn't indicate any security vulnerability being addressed. This appears to be documentation cleanup rather than a security fix.

Diff

diff --git a/fsx/latest/OpenZFSGuide/custom-snapshot-schedule.md b/fsx/latest/OpenZFSGuide/custom-snapshot-schedule.md
index 9a9d4904e..e353e587a 100644
--- a//fsx/latest/OpenZFSGuide/custom-snapshot-schedule.md
+++ b//fsx/latest/OpenZFSGuide/custom-snapshot-schedule.md
@@ -53,91 +52,0 @@ The following permissions are required to use the custom snapshot schedule AWS C
-You can use the following custom policy in place of the second set of permissions to provide scoped-down access.
-    
-    
-    {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Sid": "VisualEditor0",
-                "Effect": "Allow",
-                "Action": [
-                    "lambda:CreateFunction",
-                    "sns:TagResource",
-                    "sns:DeleteTopic",
-                    "kms:PutKeyPolicy",
-                    "events:PutRule",
-                    "iam:CreateRole",
-                    "iam:PutRolePolicy",
-                    "iam:PassRole",
-                    "kms:TagResource",
-                    "kms:ScheduleKeyDeletion",
-                    "iam:DeleteRolePolicy",
-                    "kms:DescribeKey",
-                    "sns:Subscribe",
-                    "events:RemoveTargets",
-                    "lambda:DeleteFunction",
-                    "iam:GetRole",
-                    "events:DescribeRule",
-                    "sns:GetTopicAttributes",
-                    "lambda:GetFunction",
-                    "sns:CreateTopic",
-                    "iam:DeleteRole",
-                    "events:DeleteRule",
-                    "events:PutTargets",
-                    "lambda:AddPermission",
-                    "iam:CreateServiceLinkedRole",
-                    "lambda:RemovePermission",
-                    "iam:GetRolePolicy"
-                ],
-                "Resource": [
-                    "arn:aws:sns:*:aws_account_id:*",
-                    "arn:aws:events:*:aws_account_id:rule/*/*",
-                    "arn:aws:kms:*:aws_account_id:key/*",
-                    "arn:aws:lambda:*:aws_account_id:function:*",
-                    "arn:aws:iam::aws_account_id:role/*"
-                ]
-            },
-            {
-                "Sid": "VisualEditor1",
-                "Effect": "Allow",
-                "Action": [
-                    "events:DeleteRule",
-                    "events:PutTargets",
-                    "events:DescribeRule",
-                    "events:PutRule",
-                    "events:RemoveTargets"
-                ],
-                "Resource": "arn:aws:events:*:aws_account_id:rule/*"
-            },
-            {
-                "Sid": "VisualEditor2",
-                "Effect": "Allow",
-                "Action": "events:PutRule",
-                "Resource": "arn:aws:events:*:aws_account_id:rule/*"
-            },
-            {
-                "Sid": "VisualEditor3",
-                "Effect": "Allow",
-                "Action": "events:PutRule",
-                "Resource": "arn:aws:events:*:aws_account_id:rule/*/*"
-            },
-            {
-                "Sid": "VisualEditor4",
-                "Effect": "Allow",
-                "Action": "kms:CreateKey",
-                "Resource": "*"
-            },
-            {
-                "Sid": "VisualEditor5",
-                "Effect": "Allow",
-                "Action": "iam:ListRoles",
-                "Resource": "arn:aws:iam::aws_account_id:role/*"
-            },
-            {
-                "Sid": "VisualEditor6",
-                "Effect": "Allow",
-                "Action": "sns:ListTopics",
-                "Resource": "arn:aws:sns:*:aws_account_id:*"
-            }
-        ]
-    }
-