AWS fsx medium security documentation change
Summary
Removed 'fsx:UpdateS3AccessPointAttachments' from managed policies in documentation
Security assessment
Reduces excessive permissions in AWS managed policies, addressing potential over-privilege risks. Reflects a security hardening measure.
Diff
diff --git a/fsx/latest/LustreGuide/doc-history.md b/fsx/latest/LustreGuide/doc-history.md index cd46f0346..41a918c78 100644 --- a//fsx/latest/LustreGuide/doc-history.md +++ b//fsx/latest/LustreGuide/doc-history.md @@ -18,0 +19,2 @@ Lustre client support for Rocky Linux and Red Hat Enterprise Linux (RHEL) 9.6 ad +Amazon FSx updated the AmazonFSxFullAccess AWS managed policy| The [AmazonFSxFullAccess](https://docs.aws.amazon.com/fsx/latest/LustreGuide/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonFSxFullAccess) managed policy was updated to add the `fsx:CreateAndAttachS3AccessPoint`, `fsx:DescribeS3AccessPointAttachments`, and `fsx:DetachAndDeleteS3AccessPoint` permissions.| June 25, 2025 +Amazon FSx updated the AmazonFSxConsoleFullAccess AWS managed policy| The [AmazonFSxConsoleFullAccess](https://docs.aws.amazon.com/fsx/latest/LustreGuide/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonFSxConsoleFullAccess) managed policy was updated to add the `fsx:CreateAndAttachS3AccessPoint`, `fsx:DescribeS3AccessPointAttachments`, and `fsx:DetachAndDeleteS3AccessPoint` permissions. | June 25, 2025 @@ -20,2 +21,0 @@ Support added for Intelligent-Tiering storage class| You can now create FSx for -Amazon FSx updated the AmazonFSxFullAccess AWS managed policy| The [AmazonFSxFullAccess](https://docs.aws.amazon.com/fsx/latest/LustreGuide/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonFSxFullAccess) managed policy was updated to add the `fsx:CreateAndAttachS3AccessPoint`, `fsx:DescribeS3AccessPointAttachments`, `fsx:UpdateS3AccessPointAttachments,` and `fsx:DetachAndDeleteS3AccessPoint` permissions.| May 28, 2025 -Amazon FSx updated the AmazonFSxConsoleFullAccess AWS managed policy| The [AmazonFSxConsoleFullAccess](https://docs.aws.amazon.com/fsx/latest/LustreGuide/security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonFSxConsoleFullAccess) managed policy was updated to add the `fsx:CreateAndAttachS3AccessPoint`, `fsx:DescribeS3AccessPointAttachments`, `fsx:UpdateS3AccessPointAttachments,` and `fsx:DetachAndDeleteS3AccessPoint` permissions. | May 28, 2025