AWS fis documentation change

Service: fis · 2025-07-18 · Documentation low

File: fis/latest/userguide/cross-region-scenario.md

Summary

Added documentation for MemoryDB multi-region cluster replication pause action and corresponding IAM permissions

Security assessment

Added documentation for new MemoryDB disruption action and required IAM permissions. While related to security controls, there's no evidence of addressing a specific security vulnerability. Documents proper security practices for configuring experiment permissions.

Diff

diff --git a/fis/latest/userguide/cross-region-scenario.md b/fis/latest/userguide/cross-region-scenario.md
index 0557d1a94..cc73c3d5e 100644
--- a//fis/latest/userguide/cross-region-scenario.md
+++ b//fis/latest/userguide/cross-region-scenario.md
@@ -40,0 +41,6 @@ This action targets DynamoDB multi-Region eventually consistent global tables in
+### Pause MemoryDB multi-Region Replication
+
+Cross-Region: Connectivity includes [aws:memorydb:multi-region-cluster-pause-replication](https://docs.aws.amazon.com/fis/latest/userguide/fis-actions-reference.html#memorydb-actions-reference) to pause replication from the regional member cluster in the experiment Region to the rest of the clusters in the targeted multi-Region cluster. Replication between other regional member clusters will be unaffected. After the scenario ends, replication will resume from the point it was paused. Note that the time for replication to sync data between the member clusters will vary based on the duration of the experiment, and the rate of data written to the clusters.
+
+This action targets MemoryDB Multi-Region clusters with a regional member in the experiment Region. By default, it targets multi-Region clusters with a [tag](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Tagging.html) named `DisruptMemoryDB` with a value of `Allowed`. You can add this tag to your multi-Region clusters or replace the default tag with your own tag in the experiment template. By default, if no valid clusters are found this action will be skipped.
+
@@ -60,0 +67,6 @@ The following policy grants AWS FIS the necessary permissions to execute an expe
+JSON
+    
+
+****
+    
+    
@@ -317,8 +328,0 @@ The following policy grants AWS FIS the necessary permissions to execute an expe
-            {
-                "Sid": "S3CrossRegion2",
-                "Effect": "Allow",
-                "Action": [
-                    "tag:GetResources"
-                ],
-                "Resource": "*"
-            },
@@ -352,8 +355,0 @@ The following policy grants AWS FIS the necessary permissions to execute an expe
-            {
-                "Sid": "DdbCrossRegion1",
-                "Effect": "Allow",
-                "Action": [
-                    "tag:GetResources"
-                ],
-                "Resource": "*"
-            },
@@ -371,0 +368,18 @@ The following policy grants AWS FIS the necessary permissions to execute an expe
+            },
+            {
+                "Sid": "ResolveResourcesViaTags",
+                "Effect": "Allow",
+                "Action": [
+                    "tag:GetResources"
+                ],
+                "Resource": "*"
+            }, {
+                "Sid": "MemDbCrossRegion",
+                "Effect": "Allow",
+                "Action": [
+                    "memorydb:DescribeMultiRegionClusters",
+                    "memorydb:PauseMultiRegionClusterReplication"
+                ],
+                "Resource": [
+                    "arn:aws:memorydb::*:multiregioncluster/*",
+                ]
@@ -419,0 +434,7 @@ The following content defines the scenario. This JSON can be saved and used to c
+                    },
+                    "MemoryDB-Multi-Region-Cluster": {
+                        "resourceType": "aws:memorydb:multi-region-cluster",
+                        "resourceTags": {
+                            "DisruptMemoryDb": "Allowed"
+                        },
+                        "selectionMode": "ALL"
@@ -460,0 +482,10 @@ The following content defines the scenario. This JSON can be saved and used to c
+                    },
+                    "Pause-MemoryDB-Multi-Region-Cluster-Replication": {
+                        "actionId": "aws:memorydb:multi-region-cluster-pause-replication",
+                        "parameters": {
+                            "duration": "PT3H",
+                            "region": "eu-west-1"
+                        },
+                        "targets": {
+                            "MultiRegionClusters": "MemoryDB-Multi-Region-Cluster"
+                        }