AWS fsx documentation change
Summary
Added entries about updates to AmazonFSxFullAccess and AmazonFSxConsoleFullAccess policies with new S3 access point permissions
Security assessment
Documents new IAM permissions (e.g., fsx:CreateAndAttachS3AccessPoint) but does not indicate a security vulnerability fix. The changes describe expanded policy capabilities for S3 access point management, which are security-related features.
Diff
diff --git a/fsx/latest/ONTAPGuide/document-history.md b/fsx/latest/ONTAPGuide/document-history.md index fb663776b..936328a44 100644 --- a//fsx/latest/ONTAPGuide/document-history.md +++ b//fsx/latest/ONTAPGuide/document-history.md @@ -20,0 +21,2 @@ Support added for FlexCache write-back mode| FSx for ONTAP volumes now support F +Amazon FSx updated the AmazonFSxFullAccess AWS managed policy| The [AmazonFSxFullAccess](https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonFSxFullAccess) managed policy was updated to add the `fsx:CreateAndAttachS3AccessPoint`, `fsx:DescribeS3AccessPointAttachments`, `fsx:UpdateS3AccessPointAttachments,` and `fsx:DetachAndDeleteS3AccessPoint` permissions.| May 28, 2025 +Amazon FSx updated the AmazonFSxConsoleFullAccess AWS managed policy| The [AmazonFSxConsoleFullAccess](https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonFSxConsoleFullAccess) managed policy was updated to add the `fsx:CreateAndAttachS3AccessPoint`, `fsx:DescribeS3AccessPointAttachments`, `fsx:UpdateS3AccessPointAttachments,` and `fsx:DetachAndDeleteS3AccessPoint` permissions. | May 28, 2025