AWS fsx documentation change
Summary
Added entries for new ec2:AssignIpv6Addresses and ec2:UnassignIpv6Addresses permissions in AmazonFSxServiceRolePolicy
Security assessment
Documents expanded IAM permissions for IPv6 management but doesn't indicate remediation of a security issue. Improves transparency of security policies.
Diff
diff --git a/fsx/latest/FileCacheGuide/security-iam-awsmanpol.md b/fsx/latest/FileCacheGuide/security-iam-awsmanpol.md index 7f51e4160..5c2fb4f57 100644 --- a//fsx/latest/FileCacheGuide/security-iam-awsmanpol.md +++ b//fsx/latest/FileCacheGuide/security-iam-awsmanpol.md @@ -152,0 +153,2 @@ Change | Description | Date +[AmazonFSxServiceRolePolicy](./using-service-linked-roles.html#slr-permissions) – Update to an existing policy | Amazon FSx added a new permission, `ec2:AssignIpv6Addresses` that allows principals to assign IPv6 addresses to customer network interfaces that have an `AmazonFSx.FileSystemId` tag. | July 22, 2025 +[AmazonFSxServiceRolePolicy](./using-service-linked-roles.html#slr-permissions) – Update to an existing policy | Amazon FSx added a new permission, `ec2:UnassignIpv6Addresses` that allows principals to unassign IPv6 addresses from customer network interfaces that have an `AmazonFSx.FileSystemId` tag. | July 22, 2025