AWS fsx documentation change
Summary
Updated service name references from 'Amazon FSx' to 'FSx for Windows File Server' throughout the document to clarify service-specific context for service-linked roles
Security assessment
Changes are branding/terminology updates rather than security fixes. No vulnerabilities or new security features are mentioned. The updates maintain existing security documentation about service-linked roles without altering their security properties.
Diff
diff --git a/fsx/latest/WindowsGuide/using-service-linked-roles.md b/fsx/latest/WindowsGuide/using-service-linked-roles.md index 94aacb135..d151c7e75 100644 --- a//fsx/latest/WindowsGuide/using-service-linked-roles.md +++ b//fsx/latest/WindowsGuide/using-service-linked-roles.md @@ -5 +5 @@ -Service-linked role permissions for Amazon FSxCreating a service-linked role for Amazon FSxEditing a service-linked role for Amazon FSxDeleting a service-linked role for Amazon FSxSupported regions for Amazon FSx service-linked roles +Service-linked role permissions for FSx for Windows File ServerCreating a service-linked role for FSx for Windows File ServerEditing a service-linked role for FSx for Windows File ServerDeleting a service-linked role for FSx for Windows File ServerSupported regions for FSx for Windows File Server service-linked roles @@ -7 +7 @@ Service-linked role permissions for Amazon FSxCreating a service-linked role for -# Using service-linked roles for Amazon FSx +# Using service-linked roles for FSx for Windows File Server @@ -9 +9 @@ Service-linked role permissions for Amazon FSxCreating a service-linked role for -Amazon FSx for Windows File Server uses AWS Identity and Access Management (IAM)[ service-linked roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-linked-role). A service-linked role is a unique type of IAM role that is linked directly to Amazon FSx. Service-linked roles are predefined by Amazon FSx and include all the permissions that the service requires to call other AWS services on your behalf. +Amazon FSx for Windows File Server uses AWS Identity and Access Management (IAM)[ service-linked roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html#iam-term-service-linked-role). A service-linked role is a unique type of IAM role that is linked directly to FSx for Windows File Server. Service-linked roles are predefined by FSx for Windows File Server and include all the permissions that the service requires to call other AWS services on your behalf. @@ -11 +11 @@ Amazon FSx for Windows File Server uses AWS Identity and Access Management (IAM) -A service-linked role makes setting up Amazon FSx easier because you don’t have to manually add the necessary permissions. Amazon FSx defines the permissions of its service-linked roles, and unless defined otherwise, only Amazon FSx can assume its roles. The defined permissions include the trust policy and the permissions policy, and that permissions policy cannot be attached to any other IAM entity. +A service-linked role makes setting up FSx for Windows File Server easier because you don’t have to manually add the necessary permissions. FSx for Windows File Server defines the permissions of its service-linked roles, and unless defined otherwise, only FSx for Windows File Server can assume its roles. The defined permissions include the trust policy and the permissions policy, and that permissions policy cannot be attached to any other IAM entity. @@ -13 +13 @@ A service-linked role makes setting up Amazon FSx easier because you don’t hav -You can delete a service-linked role only after first deleting their related resources. This protects your Amazon FSx resources because you can't inadvertently remove permission to access the resources. +You can delete a service-linked role only after first deleting their related resources. This protects your FSx for Windows File Server resources because you can't inadvertently remove permission to access the resources. @@ -17 +17 @@ For information about other services that support service-linked roles, see [AWS -## Service-linked role permissions for Amazon FSx +## Service-linked role permissions for FSx for Windows File Server @@ -19 +19 @@ For information about other services that support service-linked roles, see [AWS -Amazon FSx uses the service-linked role named `AWSServiceRoleForAmazonFSx` – Which performs certain actions in your account, like creating Elastic Network Interfaces for your file systems in your VPC. +FSx for Windows File Server uses the service-linked role named `AWSServiceRoleForAmazonFSx` – Which performs certain actions in your account, like creating Elastic Network Interfaces for your file systems in your VPC. @@ -21 +21 @@ Amazon FSx uses the service-linked role named `AWSServiceRoleForAmazonFSx` – W -The role permissions policy allows Amazon FSx to complete the following actions on the all applicable AWS resources: +The role permissions policy allows FSx for Windows File Server to complete the following actions on the all applicable AWS resources: @@ -23 +23 @@ The role permissions policy allows Amazon FSx to complete the following actions -You can't attach AmazonFSxServiceRolePolicy to your IAM entities. This policy is attached to a service-linked role that allows FSx to manage AWS resources on your behalf. For more information, see [Using service-linked roles for Amazon FSx](./using-service-linked-roles.html). +You can't attach AmazonFSxServiceRolePolicy to your IAM entities. This policy is attached to a service-linked role that allows FSx to manage AWS resources on your behalf. For more information, see [Using service-linked roles for FSx for Windows File Server](./using-service-linked-roles.html). @@ -184 +184 @@ You must configure permissions to allow an IAM entity (such as a user, group, or -## Creating a service-linked role for Amazon FSx +## Creating a service-linked role for FSx for Windows File Server @@ -186 +186 @@ You must configure permissions to allow an IAM entity (such as a user, group, or -You don't need to manually create a service-linked role. When you create a file system in the AWS Management Console, the IAM CLI, or the IAM API, Amazon FSx creates the service-linked role for you. +You don't need to manually create a service-linked role. When you create a file system in the AWS Management Console, the IAM CLI, or the IAM API, FSx for Windows File Server creates the service-linked role for you. @@ -192 +192 @@ This service-linked role can appear in your account if you completed an action i -If you delete this service-linked role, and then need to create it again, you can use the same process to recreate the role in your account. When you create a file system, Amazon FSx creates the service-linked role for you again. +If you delete this service-linked role, and then need to create it again, you can use the same process to recreate the role in your account. When you create a file system, FSx for Windows File Server creates the service-linked role for you again. @@ -194 +194 @@ If you delete this service-linked role, and then need to create it again, you ca -## Editing a service-linked role for Amazon FSx +## Editing a service-linked role for FSx for Windows File Server @@ -196 +196 @@ If you delete this service-linked role, and then need to create it again, you ca -Amazon FSx does not allow you to edit the service-linked role. After you create a service-linked role, you cannot change the name of the role because various entities might reference the role. However, you can edit the description of the role using IAM. For more information, see [Editing a Service-Linked Role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#edit-service-linked-role) in the _IAM User Guide_. +FSx for Windows File Server does not allow you to edit the service-linked role. After you create a service-linked role, you cannot change the name of the role because various entities might reference the role. However, you can edit the description of the role using IAM. For more information, see [Editing a Service-Linked Role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#edit-service-linked-role) in the _IAM User Guide_. @@ -198 +198 @@ Amazon FSx does not allow you to edit the service-linked role. After you create -## Deleting a service-linked role for Amazon FSx +## Deleting a service-linked role for FSx for Windows File Server @@ -204 +204 @@ If you no longer need to use a feature or service that requires a service-linked -If the Amazon FSx service is using the role when you try to delete the resources, then the deletion might fail. If that happens, wait for a few minutes and try the operation again. +If the FSx for Windows File Server service is using the role when you try to delete the resources, then the deletion might fail. If that happens, wait for a few minutes and try the operation again. @@ -210 +210 @@ Use the IAM console, the IAM CLI, or the IAM API to delete the service-linked ro -## Supported regions for Amazon FSx service-linked roles +## Supported regions for FSx for Windows File Server service-linked roles @@ -212 +212 @@ Use the IAM console, the IAM CLI, or the IAM API to delete the service-linked ro -Amazon FSx supports using service-linked roles in all of the regions where the service is available. For more information, see [AWS Regions and Endpoints](https://docs.aws.amazon.com/general/latest/gr/rande.html). +FSx for Windows File Server supports using service-linked roles in all of the regions where the service is available. For more information, see [AWS Regions and Endpoints](https://docs.aws.amazon.com/general/latest/gr/rande.html).