AWS appstream2 documentation change
Summary
Added IAM permission requirement note for fleet deletion with auto scaling policies.
Security assessment
Documents required IAM permission (application-autoscaling:DeregisterScalableTarget) to prevent orphaned resources during fleet deletion. While related to resource management, no specific security vulnerability is addressed.
Diff
diff --git a/appstream2/latest/developerguide/autoscaling-console.md b/appstream2/latest/developerguide/autoscaling-console.md index bff86c371..8cc3c62ac 100644 --- a//appstream2/latest/developerguide/autoscaling-console.md +++ b//appstream2/latest/developerguide/autoscaling-console.md @@ -61,0 +62,4 @@ The fixed fleet has constant capacity based on the value that you specified as * +###### Important + +To delete a fleet that has an associated auto scaling policy, the IAM role used to perform the deletion must include the `application-autoscaling:DeregisterScalableTarget` permission. Without this permission, the fleet deletion will not fail, however, the service cannot deregister the auto scaling target associated with the fleet and it will remain as an orphan resource. Ensure this permission is included in the user's IAM policy before attempting to delete a fleet with active scaling policies. +