AWS mgn documentation change
Summary
Added Amazon FSx read permissions to the AWSApplicationMigrationFullAccess policy.
Security assessment
This extends the IAM policy to include new FSx permissions required for migration features, but doesn't address a security vulnerability. It documents expanded permissions for a security feature (IAM policy).
Diff
diff --git a/mgn/latest/ug/security-iam-awsmanpol-AWSApplicationMigrationFullAccess.md b/mgn/latest/ug/security-iam-awsmanpol-AWSApplicationMigrationFullAccess.md index 1e9a22d1d..e8deacf93 100644 --- a//mgn/latest/ug/security-iam-awsmanpol-AWSApplicationMigrationFullAccess.md +++ b//mgn/latest/ug/security-iam-awsmanpol-AWSApplicationMigrationFullAccess.md @@ -13 +13 @@ You can attach the `AWSApplicationMigrationFullAccess` policy to your IAM identi -This policy provides permissions to all public APIs of AWS Application Migration Service (AWS MGN), as well as permissions to read KMS key, License Manager, Resource Groups, Elastic Load Balancing, IAM, and EC2 information. This policy should only be granted to an administrator or a power-user. +This policy provides permissions to all public APIs of AWS Application Migration Service (AWS MGN), as well as permissions to read KMS key, License Manager, Resource Groups, Elastic Load Balancing, IAM, EC2, and Amazon FSx information. This policy should only be granted to an administrator or a power-user.