AWS fsx documentation change
Summary
Added IPv6 address management permissions and updated policy JSON examples
Security assessment
Enhances security documentation for service roles but does not address a specific security issue
Diff
diff --git a/fsx/latest/OpenZFSGuide/using-service-linked-roles.md b/fsx/latest/OpenZFSGuide/using-service-linked-roles.md index 2d659f319..8721874fe 100644 --- a//fsx/latest/OpenZFSGuide/using-service-linked-roles.md +++ b//fsx/latest/OpenZFSGuide/using-service-linked-roles.md @@ -21 +21 @@ Amazon FSx uses the service-linked role named **AWSServiceRoleForAmazonFSx** – -For updates to this policy, see [AmazonFSxServiceRolePolicy](./security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonFSxServiceRolePolicy) +For updates to this policy, see [AmazonFSxServiceRolePolicy](./security-iam-awsmanpol.html#security-iam-awsmanpol-AmazonFSxServiceRolePolicy). @@ -40,0 +41,4 @@ The AWSServiceRoleForAmazonFSx is used by all Amazon FSx file system types; some + * Assign IPv6 addresses to customer network interfaces that have an `AmazonFSx.FileSystemId` tag. + + * Unassign IPv6 addresses from customer network interfaces that have an `AmazonFSx.FileSystemId` tag. + @@ -56,6 +59,0 @@ The AWSServiceRoleForAmazonFSx is used by all Amazon FSx file system types; some -JSON - - -**** - - @@ -126,0 +125 @@ JSON + "ec2:AssignIpv6Addresses", @@ -128,0 +128 @@ JSON + "ec2:UnassignIpv6Addresses",