AWS drs documentation change
Summary
Updated wording for clarity in IAM role installation instructions and simplified UI guidance. Changed passive voice to active voice (e.g., 'click the button' → 'select').
Security assessment
The changes clarify how to install IAM roles required for post-launch actions, which are security-relevant infrastructure. However, there is no evidence this addresses a newly discovered vulnerability - it appears to be documentation refinement for an existing security control.
Diff
diff --git a/drs/latest/userguide/post-launch-action-settings-roles.md b/drs/latest/userguide/post-launch-action-settings-roles.md index 2e49b1d18..10f56cf75 100644 --- a//drs/latest/userguide/post-launch-action-settings-roles.md +++ b//drs/latest/userguide/post-launch-action-settings-roles.md @@ -9 +9 @@ To operate post-launch actions and allow to run SSM documents on launched instan -If you have already initialized Elastic Disaster Recovery in your account before September 13, 2023, it may happen that the required IAM roles were not installed in your account. +If you have already initialized Elastic Disaster Recovery in your account before September 13, 2023, it's possible that the required IAM roles were not installed in your account. @@ -11,3 +11 @@ If you have already initialized Elastic Disaster Recovery in your account before -To verify the IAM roles are installed or install them if not installed (a one time operation, go to **Settings → Default post-launch actions** and check **Post-launch actions settings** to see if there is a message labelled: **Install the required IAM roles to allow using post-launch actions**. If this message appears, click the button labelled **Install post-launched IAM roles**. If the roles were installed successfully, the message to install the roles will not be present in **Post-launch actions settings**. - - +To verify the IAM roles are installed or install them if not installed (a one time operation, go to **Settings → Default post-launch actions** and check **Post-launch actions settings**. If you see the message **Install the required IAM roles to allow using post-launch actions** select **Install post-launched IAM roles**. If the roles were installed successfully, the message to install the roles is not present in **Post-launch actions settings**.