AWS mgn documentation change

Service: mgn · 2025-10-01 · Documentation low

File: mgn/latest/ug/mgn-initialize-api.md

Summary

Removed detailed IAM role creation examples, including CLI commands for replication server and agent roles with AssumeRole policies.

Security assessment

While IAM roles are security-relevant, the removal of examples does not directly address a security flaw. This appears to be documentation simplification rather than a response to a vulnerability. However, incomplete IAM guidance could indirectly lead to misconfigurations.

Diff

diff --git a/mgn/latest/ug/mgn-initialize-api.md b/mgn/latest/ug/mgn-initialize-api.md
index 86f5dbe52..20598456d 100644
--- a//mgn/latest/ug/mgn-initialize-api.md
+++ b//mgn/latest/ug/mgn-initialize-api.md
@@ -55,48 +54,0 @@ Role name | Trusted entities
-Example using the AWS Command Line Interface without a source identity:
-    
-    
-    aws iam create-role --path "/service-role/" --role-name AWSApplicationMigrationReplicationServerRole --assume-role-policy-document 
-        {
-      "Version": "2012-10-17",		 	 	 
-      "Statement": [
-        {
-          "Effect": "Allow",
-          "Principal": {
-            "Service": "ec2.amazonaws.com"
-          },
-          "Action": "sts:AssumeRole"
-        }
-      ]
-    }
-
-After the roles have been created, attach the following AWS managed policies to the roles through the [IAM AttachRolePolicy API](https://docs.aws.amazon.com/IAM/latest/APIReference/API_AttachRolePolicy.html). Learn more about [adding and removing IAM identity permissions in the AWS IAM documentation](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage-attach-detach.html).
-
-Example of attach policy, `aws iam attach-role-policy --policy-arn arn:aws:iam::aws:policy/service-role/AWSApplicationMigrationReplicationServerPolicy --role-name AWSApplicationMigrationReplicationServerRole`
-
-Example using the AWS CLI with a source identity:
-    
-    
-    aws iam create-role --path "/service-role/" --role-name AWSApplicationMigrationAgentRole --assume-role-policy-document
-      **** {
-      "Version": "2012-10-17",		 	 	 
-      "Statement": [
-        {
-          "Effect": "Allow",
-          "Principal": {
-            "Service": "mgn.amazonaws.com"
-          },
-          "Action": [
-            "sts:AssumeRole",
-            "sts:SetSourceIdentity"
-          ],
-          "Condition": {
-            "StringLike": {
-              "sts:SourceIdentity": "s-*",
-              "aws:SourceAccount": "<SOURCE-ACCOUNT-ID>"
-            }
-          }
-        }
-      ]
-    }
-       
-