AWS drs documentation change
Summary
Removed multiple 'Note' sections, simplified instructions, removed images, restructured steps into numbered lists, and condensed content about adding trusted accounts and extending source servers.
Security assessment
The changes focus on documentation structure, clarity, and redundancy removal rather than addressing security vulnerabilities. While IAM role creation for cross-account access is mentioned, these are existing security controls being documented rather than new security features or vulnerability fixes. No evidence of patching exploits, hardening configurations, or addressing specific security incidents.
Diff
diff --git a/drs/latest/userguide/multi-account.md b/drs/latest/userguide/multi-account.md index d69247bfc..69fe4560d 100644 --- a//drs/latest/userguide/multi-account.md +++ b//drs/latest/userguide/multi-account.md @@ -58,2 +57,0 @@ You can only update the default replication template for the source servers from -###### Note - @@ -62,2 +59,0 @@ Source servers that reside in the staging account but are managed in the target -###### Note - @@ -88,2 +83,0 @@ Commercial AWS accounts can only be extended to other Commercial AWS accounts an - - @@ -92,3 +86 @@ Under trusted accounts settings, you will find the **Existing trusted accounts** - - -Use **Add trusted accounts and create roles** to add roles for any trusted account you plan to use. +Use **Add trusted accounts and create roles** to add roles for any trusted account you plan to use: @@ -96 +88 @@ Use **Add trusted accounts and create roles** to add roles for any trusted accou - + 1. On the **Add trusted accounts and create roles** page, choose **Add new trusted account**. @@ -98 +90 @@ Use **Add trusted accounts and create roles** to add roles for any trusted accou -On the **Add trusted accounts and create roles** page, choose **Add new trusted account**. + 2. Enter the AWS account IDs of the trusted account and select **staging role**. This automatically generates a service IAM role that will allow the use of Amazon EC2, Amazon EBS and AWS DRS resources in the staging account on behalf of a trusted account’s user. @@ -100 +92 @@ On the **Add trusted accounts and create roles** page, choose **Add new trusted - + 3. Choose **Add new trusted account** to add more than one trusted account at once. You can add up to 10 trusted accounts at once. @@ -102 +94 @@ On the **Add trusted accounts and create roles** page, choose **Add new trusted -Enter the AWS account IDs of the trusted account and select staging role. This will automatically generate a service IAM role that will allow the use of Amazon EC2, Amazon EBS and AWS DRS resources in the staging account on behalf of a trusted account’s user. + 4. Once you have added your accounts, choose **Add trusted accounts and create roles**. @@ -104 +95,0 @@ Enter the AWS account IDs of the trusted account and select staging role. This w -Choose **Add new trusted account** to add more than one trusted account at once. You can add up to 10 trusted accounts at once. @@ -106 +96,0 @@ Choose **Add new trusted account** to add more than one trusted account at once. -Once you have added your accounts, choose **Add trusted accounts and create roles**. @@ -108 +97,0 @@ Once you have added your accounts, choose **Add trusted accounts and create role - @@ -122,2 +110,0 @@ IAM roles are automatically created for the target accounts on the **Settings: t - - @@ -126,3 +113 @@ Under trusted accounts settings, you will find the **Existing trusted accounts** - - -Use **Add trusted accounts and create roles** to add roles for any trusted account you plan to use. +Use **Add trusted accounts and create roles** to add roles for any trusted account you plan to use: @@ -130 +115 @@ Use **Add trusted accounts and create roles** to add roles for any trusted accou - + 1. On the **Add trusted accounts and create roles** page, choose **Add new trusted account**. @@ -132 +117 @@ Use **Add trusted accounts and create roles** to add roles for any trusted accou -On the **Add trusted accounts and create roles** page, choose **Add new trusted account**. + 2. Enter the AWS account IDs of the trusted account and select staging role. This will automatically generate a service IAM role that will allow the use of Amazon EC2, Amazon EBS and AWS DRS resources in the staging account on behalf of a trusted account’s user. @@ -134 +119 @@ On the **Add trusted accounts and create roles** page, choose **Add new trusted - + 3. Choose **Add new trusted account** to add more than one trusted account at once. You can add up to 10 trusted accounts at once. @@ -136 +121 @@ On the **Add trusted accounts and create roles** page, choose **Add new trusted -Enter the AWS account IDs of the target account. This will automatically generate a service IAM role that will allow the use of Amazon EC2, Amazon EBS and AWS DRS resources in the staging account on behalf of a target account’s user. + 4. Once you have added your accounts, choose **Add trusted accounts and create roles**. @@ -138 +122,0 @@ Enter the AWS account IDs of the target account. This will automatically generat -Choose **Add new trusted account** to add more than one trusted account at once. You can add up to 10 trusted accounts at once. @@ -140 +123,0 @@ Choose **Add new trusted account** to add more than one trusted account at once. -Once you have added your accounts, choose **Add trusted accounts and create roles**. @@ -142 +124,0 @@ Once you have added your accounts, choose **Add trusted accounts and create role - @@ -201 +183 @@ If you plan on using an AWS account and AWS Region in which AWS DRS has not been -In order to add your source servers from your staging accounts into your target account, you must extend the source servers from the staging account to the target account. +To add your source servers from your staging accounts into your target account you must extend the source servers from the staging account to the target account. @@ -205,15 +187 @@ In order to add your source servers from your staging accounts into your target -You must repeat the steps below for every staging account you want to associate with the target account. - -Navigate to the **Source servers** view within the target account, open the **Actions** menu, and choose **Create extended source servers**. This will extend the source servers from the staging accounts into the target account, allowing you to manage all of the source servers in your staging accounts through a single target account. - - - -The **Create extended source servers** wizard will appear. The wizard is composed of three steps: - - * Configure access - - * Extend source servers - - * Review and create - - +Repeat the steps for every staging account you want to associate with the target account. @@ -220,0 +189 @@ The **Create extended source servers** wizard will appear. The wizard is compose + 1. Navigate to the **Source servers** view within the target account, open the **Actions** menu, and choose **Create extended source servers** to start the **Create extended source servers** wizard. @@ -222 +191 @@ The **Create extended source servers** wizard will appear. The wizard is compose -First you must configure access. Under **Configure access > Staging account configuration**, enter the ID of the staging account in which you created the IAM roles in the previous step. Choose **Next**. + 2. Under **Configure access > Staging account configuration**, enter the ID of the staging account in which you created the IAM roles in the previous step. @@ -224,5 +193 @@ First you must configure access. Under **Configure access > Staging account conf - - -Select the source servers you want to extend from the staging account into the target account by checking the box to the left of the source server **Hostname**. This will create a new source server resource that will inherit the replication configuration and points in time from the base source server in the staging account. Only source servers that have not already been extended will be shown. Once you have selected your source servers, choose **Next**. - - + 3. Select the source servers you want to extend from the staging account into the target account **Hostname**. This will create a new source server resource that will inherit the replication configuration and points in time from the base source server in the staging account. Only source servers that have not already been extended will be shown. Once you have selected your source servers, choose **Next**. @@ -234,4 +198,0 @@ The Extend source servers page will only show 30 source servers per page. If you - - -###### Note - @@ -240,3 +201 @@ You can filter the source servers shown by Hostname or Source Server ID through - - -You can add **Tags** if you wish to or you can skip this step. Add tags if you wish to, and then choose **Next**. [Learn more about adding tags in AWS DRS.](https://docs.aws.amazon.com/drs/latest/userguide/drs_tags-new.html) +Optional: Add **Tags**. [Learn more about adding tags in AWS DRS.](https://docs.aws.amazon.com/drs/latest/userguide/drs_tags-new.html) @@ -244 +203 @@ You can add **Tags** if you wish to or you can skip this step. Add tags if you w - + 4. **Review and create** the extended source servers. Review the information on the page and then choose **Create extended source servers**. @@ -246 +204,0 @@ You can add **Tags** if you wish to or you can skip this step. Add tags if you w -Finally, **Review and create** the extended source servers. Review the information on the page and then choose **Create extended source servers**. @@ -248 +205,0 @@ Finally, **Review and create** the extended source servers. Review the informati - @@ -250 +206,0 @@ Finally, **Review and create** the extended source servers. Review the informati - @@ -252,3 +208 @@ Finally, **Review and create** the extended source servers. Review the informati -The AWS DRS console show the **Successfully created X extended source servers** message and you will see your extended source servers in your target account. - - +The AWS DRS console shows the **Successfully created X extended source servers** message and you will see your extended source servers in your target account. @@ -260,2 +213,0 @@ Extended source servers will show **Extended** under **Extension status** in the - - @@ -268,2 +219,0 @@ Source servers are grouped by staging account. You can choose the staging accoun - - @@ -274,2 +223,0 @@ If you want to see the Source Server ID and Staging Account ID of each source se - - @@ -278,7 +226 @@ From **Preferences** , toggle the **Source server ID** and **Staging account ID* - - -You will now see these columns added to the main source servers view. - - - -You can now perform normal AWS DRS operations for the source servers, including: +You can now perform Elastic Disaster Recovery operations for the source servers, including: @@ -323,2 +264,0 @@ If your source server shows **Extension error** under the **Ready for recovery** - - @@ -327,2 +266,0 @@ Navigate to the source server details page by choosing the server's hostname in - -