AWS mgn medium security documentation change
Summary
Added documentation for two new IAM roles and updated policy attachment steps
Security assessment
Added two new IAM roles (AWSApplicationMigrationFsxProxyRole and AWSApplicationMigrationFsxProxyLinkRole) with sts:AssumeRole permissions. This explicitly documents new security controls for FSx integration, requiring specific policy attachments to delegate permissions securely.
Diff
diff --git a/mgn/latest/ug/mgn-initialize-api.md b/mgn/latest/ug/mgn-initialize-api.md index 312c8a40a..a9f6442fb 100644 --- a//mgn/latest/ug/mgn-initialize-api.md +++ b//mgn/latest/ug/mgn-initialize-api.md @@ -54,0 +55,2 @@ Role name | Trusted entities +**AWSApplicationMigrationFsxProxyRole** | "mgn.amazonaws.com" | "sts:AssumeRole" | - +**AWSApplicationMigrationFsxProxyLinkRole** | "mgn.amazonaws.com" | "sts:AssumeRole" | - @@ -67 +69,5 @@ Role name | Trusted entities - 6. Attach Managed Policy**AWSApplicationMigrationAgentPolicy_v2** to Role **AWSApplicationMigrationAgentRole** + 6. Attach Managed Policy**AWSApplicationMigrationFSxProxyPolicy** to Role **AWSApplicationMigrationFsxProxyRole** + + 7. Attach Managed Policy**AWSApplicationMigrationFSxProxyVPCPolicy** to Role **AWSApplicationMigrationFsxProxyLinkRole** + + 8. Attach Managed Policy**AWSApplicationMigrationAgentPolicy_v2** to Role **AWSApplicationMigrationAgentRole**