AWS appstream2 documentation change
Summary
Added IAM permission requirement note for fleet deletion with auto scaling policies.
Security assessment
Repeats documentation about required IAM permission (application-autoscaling:DeregisterScalableTarget) for clean resource deletion. Enhances operational security but doesn't address a specific vulnerability.
Diff
diff --git a/appstream2/latest/developerguide/set-up-stacks-fleets-finish.md b/appstream2/latest/developerguide/set-up-stacks-fleets-finish.md index af26b3d87..b9bdbde21 100644 --- a//appstream2/latest/developerguide/set-up-stacks-fleets-finish.md +++ b//appstream2/latest/developerguide/set-up-stacks-fleets-finish.md @@ -12,0 +13,4 @@ Note that you cannot delete a stack with an associated fleet. +###### Important + +To delete a fleet that has an associated auto scaling policy, the IAM role used to perform the deletion must include the `application-autoscaling:DeregisterScalableTarget` permission. Without this permission, the fleet deletion will not fail, however, the service cannot deregister the auto scaling target associated with the fleet and it will remain as an orphan resource. Ensure this permission is included in the user's IAM policy before attempting to delete a fleet with active scaling policies. +