AWS evs documentation change
Summary
Updated service name references from 'Amazon EVS' to '{evws}' and 'AWS' to '{aws}' throughout the document, including placeholders for console/CLI references. No functional changes to service-linked role behavior.
Security assessment
The changes are purely cosmetic, replacing service names with placeholders/variables. There are no modifications to security policies, permissions, or procedures. The security implications of service-linked roles (e.g., predefined permissions, deletion safeguards) remain unchanged from the previous documentation.
Diff
diff --git a/evs/latest/userguide/using-service-linked-roles.md b/evs/latest/userguide/using-service-linked-roles.md index 8db8d499c..7854233ed 100644 --- a//evs/latest/userguide/using-service-linked-roles.md +++ b//evs/latest/userguide/using-service-linked-roles.md @@ -5 +5 @@ -Service-linked role permissions for Amazon EVSCreating a service-linked role for Amazon EVSEditing a service-linked role for Amazon EVSDeleting a service-linked role for Amazon EVSSupported regions for Amazon EVS service-linked roles +Service-linked role permissions for {evws}Creating a service-linked role for {evws}Editing a service-linked role for {evws}Deleting a service-linked role for {evws}Supported regions for {evws} service-linked roles @@ -7 +7 @@ Service-linked role permissions for Amazon EVSCreating a service-linked role for -# Using service-linked roles for Amazon EVS +# Using service-linked roles for {evws} @@ -9 +9 @@ Service-linked role permissions for Amazon EVSCreating a service-linked role for -Amazon Elastic VMware Service uses AWS Identity and Access Management (IAM) [service-linked roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html#iam-term-service-linked-role). A service-linked role is a unique type of IAM role that is linked directly to Amazon EVS. Service-linked roles are predefined by Amazon EVS and include all the permissions that the service requires to call other AWS services on your behalf. +{evws-long} uses {aws} Identity and Access Management (IAM) [service-linked roles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html#iam-term-service-linked-role). A service-linked role is a unique type of IAM role that is linked directly to {evws}. Service-linked roles are predefined by {evws} and include all the permissions that the service requires to call other {aws} services on your behalf. @@ -11 +11 @@ Amazon Elastic VMware Service uses AWS Identity and Access Management (IAM) [ser -A service-linked role makes setting up Amazon EVS easier because you don’t have to manually add the necessary permissions. Amazon EVS defines the permissions of its service-linked roles, and unless defined otherwise, only Amazon EVS can assume its roles. The defined permissions include the trust policy and the permissions policy, and that permissions policy cannot be attached to any other IAM entity. +A service-linked role makes setting up {evws} easier because you don’t have to manually add the necessary permissions. {evws} defines the permissions of its service-linked roles, and unless defined otherwise, only {evws} can assume its roles. The defined permissions include the trust policy and the permissions policy, and that permissions policy cannot be attached to any other IAM entity. @@ -13 +13 @@ A service-linked role makes setting up Amazon EVS easier because you don’t hav -You can delete a service-linked role only after first deleting their related resources. This protects your Amazon EVS resources because you can’t inadvertently remove permission to access the resources. +You can delete a service-linked role only after first deleting their related resources. This protects your {evws} resources because you can’t inadvertently remove permission to access the resources. @@ -15 +15 @@ You can delete a service-linked role only after first deleting their related res -For information about other services that support service-linked roles, see [AWS services that work with IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html) and look for the services that have **Yes** in the **Service-linked role** column. Choose a **Yes** with a link to view the service-linked role documentation for that service. +For information about other services that support service-linked roles, see [{aws} services that work with IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_aws-services-that-work-with-iam.html) and look for the services that have **Yes** in the **Service-linked role** column. Choose a **Yes** with a link to view the service-linked role documentation for that service. @@ -17 +17 @@ For information about other services that support service-linked roles, see [AWS -## Service-linked role permissions for Amazon EVS +## Service-linked role permissions for {evws} @@ -19 +19 @@ For information about other services that support service-linked roles, see [AWS -Amazon EVS uses the service-linked role named `AWSServiceRoleForAmazonEVS`. The role allows Amazon EVS to manage environments in your account. The attached policy allows the role to manage the following resources: EVS elastic network interfaces, EVS VLAN subnets, EVS hosts, VPCs, and CloudWatch metrics. +{evws} uses the service-linked role named `AWSServiceRoleForAmazonEVS`. The role allows {evws} to manage environments in your account. The attached policy allows the role to manage the following resources: EVS elastic network interfaces, EVS VLAN subnets, EVS hosts, VPCs, and CloudWatch metrics. @@ -28 +28 @@ The `AWSServiceRoleForAmazonEVS` service-linked role trusts the following servic -The role permissions policy allows Amazon EVS to complete the following actions on the specified resources: +The role permissions policy allows {evws} to complete the following actions on the specified resources: @@ -37 +37 @@ You must configure permissions to allow an IAM entity (such as a user, group, or -## Creating a service-linked role for Amazon EVS +## Creating a service-linked role for {evws} @@ -39 +39 @@ You must configure permissions to allow an IAM entity (such as a user, group, or -You don’t need to manually create a service-linked role. When you create an environment in the AWS Management Console, the AWS CLI, or the AWS API, Amazon EVS creates the service-linked role for you. +You don’t need to manually create a service-linked role. When you create an environment in the {aws-management-console}, the {aws} CLI, or the {aws} API, {evws} creates the service-linked role for you. @@ -41 +41 @@ You don’t need to manually create a service-linked role. When you create an en -If you delete this service-linked role, and then need to create it again, you can use the same process to recreate the role in your account. When you create an environment, Amazon EVS creates the service-linked role for you again. +If you delete this service-linked role, and then need to create it again, you can use the same process to recreate the role in your account. When you create an environment, {evws} creates the service-linked role for you again. @@ -43 +43 @@ If you delete this service-linked role, and then need to create it again, you ca -## Editing a service-linked role for Amazon EVS +## Editing a service-linked role for {evws} @@ -45 +45 @@ If you delete this service-linked role, and then need to create it again, you ca -Amazon EVS does not allow you to edit the `AWSServiceRoleForAmazonEVS` service-linked role. After you create a service-linked role, you cannot change the name of the role because various entities might reference the role. However, you can edit the description of the role using IAM. For more information, see [Editing a service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#edit-service-linked-role) in the _IAM User Guide_. +{evws} does not allow you to edit the `AWSServiceRoleForAmazonEVS` service-linked role. After you create a service-linked role, you cannot change the name of the role because various entities might reference the role. However, you can edit the description of the role using IAM. For more information, see [Editing a service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#edit-service-linked-role) in the _IAM User Guide_. @@ -47 +47 @@ Amazon EVS does not allow you to edit the `AWSServiceRoleForAmazonEVS` service-l -## Deleting a service-linked role for Amazon EVS +## Deleting a service-linked role for {evws} @@ -53 +53 @@ If you no longer need to use a feature or service that requires a service-linked -Before you can use IAM to delete a service-linked role, you must first delete any resources used by the role. For steps to delete an Amazon EVS environment with hosts, see [Delete the Amazon EVS hosts and environment](./getting-started.html#getting-started-cleanup-env-hosts). +Before you can use IAM to delete a service-linked role, you must first delete any resources used by the role. For steps to delete an {evws} environment with hosts, see [Delete the Amazon EVS hosts and environment](./getting-started.html#getting-started-cleanup-env-hosts). @@ -57 +57 @@ Before you can use IAM to delete a service-linked role, you must first delete an -If the Amazon EVS service is using the role when you try to delete the resources, then the deletion might fail. If that happens, wait for a few minutes and try the operation again. +If the {evws} service is using the role when you try to delete the resources, then the deletion might fail. If that happens, wait for a few minutes and try the operation again. @@ -61 +61 @@ If the Amazon EVS service is using the role when you try to delete the resources -Use the IAM console, the AWS CLI, or the AWS API to delete the `AWSServiceRoleForAmazonEVS` service-linked role. For more information, see [Deleting a service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#delete-service-linked-role) in the _IAM User Guide_. +Use the IAM console, the {aws} CLI, or the {aws} API to delete the `AWSServiceRoleForAmazonEVS` service-linked role. For more information, see [Deleting a service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#delete-service-linked-role) in the _IAM User Guide_. @@ -63 +63 @@ Use the IAM console, the AWS CLI, or the AWS API to delete the `AWSServiceRoleFo -## Supported regions for Amazon EVS service-linked roles +## Supported regions for {evws} service-linked roles @@ -65 +65 @@ Use the IAM console, the AWS CLI, or the AWS API to delete the `AWSServiceRoleFo -Amazon EVS supports using service-linked roles in all of the regions where the service is available. For more information, see [Amazon Elastic VMware Service endpoints and quotas](https://docs.aws.amazon.com/general/latest/gr/evs.html) in the _AWS General Reference Guide_. +{evws} supports using service-linked roles in all of the regions where the service is available. For more information, see [{evws-long} endpoints and quotas](https://docs.aws.amazon.com/general/latest/gr/evs.html) in the _{ aws} General Reference Guide_.