AWS drs documentation change
Summary
Streamlined explanation of Failback Client credential refresh functionality
Security assessment
Combines two paragraphs about failback operations without changing security posture. Maintains warning against manual policy attachment but doesn't address vulnerabilities.
Diff
diff --git a/drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryFailbackPolicy.md b/drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryFailbackPolicy.md index 543c995ef..5d55aca6b 100644 --- a//drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryFailbackPolicy.md +++ b//drs/latest/userguide/security-iam-awsmanpol-AWSElasticDisasterRecoveryFailbackPolicy.md @@ -7,3 +7 @@ -This policy allows using the AWS Elastic Disaster Recovery Failback Client, which is used to failback recovery instances back to your original source infrastructure. We do not recommend that you attach this policy to your users or roles. - -This policy is used by AWS Elastic Disaster Recovery to refresh credentials for the AWS Elastic Disaster Recovery Failback Client. We do not recommend that you attach this policy to your users or roles. +This policy allows using the AWS Elastic Disaster Recovery Failback Client, which is used to fail back Recovery Instances to your original source infrastructure. This policy is also used by AWS Elastic Disaster Recovery to refresh credentials for the Failback Client. We do not recommend that you attach this policy to your users or roles.