AWS r53recovery documentation change
Summary
Updated managed policy documentation to include new permissions for balanced capacity checks
Security assessment
The change documents new IAM policy permissions (e.g., autoscaling:DescribeAutoScalingGroups) for a managed policy. This is a routine update to reflect added capabilities, not a direct response to a security issue.
Diff
diff --git a/r53recovery/latest/dg/security-iam-awsmanpol.md b/r53recovery/latest/dg/security-iam-awsmanpol.md index 9f9d91967..e42506997 100644 --- a//r53recovery/latest/dg/security-iam-awsmanpol.md +++ b//r53recovery/latest/dg/security-iam-awsmanpol.md @@ -9 +9 @@ Policy updates -For information about the AWS managed policies for the capabilities with managed policies, including a managed policy for a service-linked role, see the following topics: +For information about the AWS managed policies for the ARC capabilities with managed policies, including a managed policy for a service-linked role, see the following topics: @@ -25,0 +26 @@ Change | Description | Date +[AWSZonalAutoshiftPracticeRunSLRPolicy managed policy](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSZonalAutoshiftPracticeRunSLRPolicy.html) – Updated policy | Adds the policy statement `AutoshiftPracticeCheckPermissions` with the permissions `autoscaling:DescribeAutoScalingGroups`, `ec2:DescribeInstances`, `elasticloadbalancing:DescribeTargetHealth`, and `elasticloadbalancing:DescribeTargetHealth` to support balanced capacity checks. To learn more, see [How zonal autoshift and practice runs work](./arc-zonal-autoshift.how-it-works.html). | June 30, 2025