AWS drs documentation change
Summary
Added reference to full policy definition and clarified cleanup steps for service-linked role deletion
Security assessment
The change adds a link to the full IAM policy documentation and provides more specific instructions for cleaning up resources before deleting the service-linked role. This improves security documentation by clarifying proper IAM role management and resource cleanup procedures, but doesn't address a specific security vulnerability.
Diff
diff --git a/drs/latest/userguide/using-service-linked-roles.md b/drs/latest/userguide/using-service-linked-roles.md index ca7c5560e..27075e818 100644 --- a//drs/latest/userguide/using-service-linked-roles.md +++ b//drs/latest/userguide/using-service-linked-roles.md @@ -23 +23 @@ The AWSServiceRoleForElasticDisasterRecovery service-linked role trusts the foll -The role permissions policy allows AWS Elastic Disaster Recovery to complete the following actions on the specified resources. +The role permissions policy allows AWS Elastic Disaster Recovery to complete the following actions on the specified resources. For the full policy definition, see [AWSElasticDisasterRecoveryServiceRolePolicy](./security-iam-awsmanpol-AWSElasticDisasterRecoveryServiceRolePolicy.html). @@ -49 +49 @@ If AWS Elastic Disaster Recovery is using the role when you try to delete the re -Resources can be cleaned up without stopping any AWS Elastic Disaster Recovery services. Cleaning up AWS Elastic Disaster Recovery resources will cause AWS Elastic Disaster Recovery to stop working. For more information, see [Cleaning up a service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#delete-service-linked-role) in the _IAM User Guide_. +Resources can be cleaned up without stopping any AWS Elastic Disaster Recovery services. Cleaning up AWS Elastic Disaster Recovery resources will cause AWS Elastic Disaster Recovery to stop working. To clean up resources, you should disconnect all source servers, terminate all Recovery Instances, and delete all replication and launch configuration templates from AWS Elastic Disaster Recovery. For more information, see [Cleaning up a service-linked role](https://docs.aws.amazon.com/IAM/latest/UserGuide/using-service-linked-roles.html#delete-service-linked-role) in the _IAM User Guide_.