AWS fsx documentation change
Summary
Updated policy documentation to include S3 access point permissions and reorganized content
Security assessment
Adds documentation for new S3 access point management permissions (e.g., fsx:DetachAndDeleteS3AccessPoint) in IAM policies. These changes clarify security controls but do not address a specific security issue.
Diff
diff --git a/fsx/latest/ONTAPGuide/security-iam-awsmanpol.md b/fsx/latest/ONTAPGuide/security-iam-awsmanpol.md index 57c5067b8..d23da563c 100644 --- a//fsx/latest/ONTAPGuide/security-iam-awsmanpol.md +++ b//fsx/latest/ONTAPGuide/security-iam-awsmanpol.md @@ -7 +7 @@ AmazonFSxServiceRolePolicyAmazonFSxDeleteServiceLinkedRoleAccessAmazonFSxFullAcc -# AWS managed policies for Amazon FSx +# AWS managed policies for Amazon FSx for OpenZFS @@ -55,2 +54,0 @@ This policy includes the following permissions. - * `logs` – Allows principals to create log groups, log streams, and write events to log streams. This is required so that users can monitor FSx for Windows File Server file system access by sending audit access logs to CloudWatch Logs. - @@ -58,0 +57,2 @@ This policy includes the following permissions. + * `logs` – Allows principals to create log groups, log streams, and write events to log streams. This is required so that users can monitor FSx for Windows File Server file system access by sending audit access logs to CloudWatch Logs. + @@ -138,2 +137,0 @@ You can attach the `AmazonFSxReadOnlyAccess` policy to your IAM identities. -This policy includes the following permissions. - @@ -154,0 +153,8 @@ Change | Description | Date +AmazonFSxConsoleFullAccess – Update to an existing policy | Amazon FSx added a new permission, `fsx:CreateAndAttachS3AccessPoint` that allows principals to create an S3 and attach it to an FSx volume. | April 14, 2025 +AmazonFSxConsoleFullAccess – Update to an existing policy | Amazon FSx added a new permission, `fsx:DescribeS3AccessPointAttachments` that allows principals to list all S3 in an AWS account in an AWS Region | April 14, 2025 +AmazonFSxConsoleFullAccess – Update to an existing policy | Amazon FSx added a new permission, `fsx:UpdateS3AccessPointAttachments` that allows principals to modify an existing S3 . | April 14, 2025 +AmazonFSxConsoleFullAccess – Update to an existing policy | Amazon FSx added a new permission, `fsx:DetachAndDeleteS3AccessPoint` that allows principals to delete an S3 . | April 14, 2025 +AmazonFSxFullAccess – Update to an existing policy | Amazon FSx added a new permission, `fsx:CreateAndAttachS3AccessPoint` that allows principals to create an S3 and attach it to an FSx volume. | April 14, 2025 +AmazonFSxFullAccess – Update to an existing policy | Amazon FSx added a new permission, `fsx:DescribeS3AccessPointAttachments` that allows principals to list all S3 in an AWS account in an AWS Region | April 14, 2025 +AmazonFSxFullAccess – Update to an existing policy | Amazon FSx added a new permission, `fsx:UpdateS3AccessPointAttachments` that allows principals to modify an existing S3 . | April 14, 2025 +AmazonFSxFullAccess – Update to an existing policy | Amazon FSx added a new permission, `fsx:DetachAndDeleteS3AccessPoint` that allows principals to delete an S3 . | April 14, 2025 @@ -164,2 +170,2 @@ AmazonFSxConsoleFullAccess – Update to an existing policy | Amazon FSx added n -AmazonFSxFullAccess – Update to an existing policy | Amazon FSx added a new permission to enable users to perform on-demand replication of volumes for FSx for OpenZFS file systems. | November 26, 2023 -AmazonFSxConsoleFullAccess – Update to an existing policy | Amazon FSx added a new permission to enable users to perform on-demand replication of volumes for FSx for OpenZFS file systems. | November 26, 2023 +AmazonFSxFullAccess – Update to an existing policy | Amazon FSx added new permission to enable users to perform on-demand replication of volumes for FSx for OpenZFS file systems. | November 26, 2023 +AmazonFSxConsoleFullAccess – Update to an existing policy | Amazon FSx added new permission to enable users to perform on-demand replication of volumes for FSx for OpenZFS file systems. | November 26, 2023