AWS managed policy: AWSElasticDisasterRecoveryFailbackInstallationPolicy

You can attach the AWSElasticDisasterRecoveryFailbackInstallationPolicy policy to your IAM identities.

This policy allows installing the AWS Elastic Disaster Recovery Failback Client, which is used to failback Recovery Instances back to your original source infrastructure. Attach this policy to your users or roles whose credentials you provide when running the AWS Elastic Disaster Recovery Failback Client.

Permissions details

This policy includes the following permissions.

{
	"Version": "2012-10-17",
	"Statement": [
		{
		        "Sid": "DRSFailbackInstallationPolicy1",
			"Effect": "Allow",
			"Action": [
				"drs:SendClientLogsForDrs",
				"drs:SendClientMetricsForDrs",
				"drs:DescribeRecoveryInstances",
				"drs:DescribeSourceServers"
			],
			"Resource": "*"
		},
		{
		        "Sid": "DRSFailbackInstallationPolicy2",
			"Effect": "Allow",
			"Action": [
				"drs:TagResource",
				"drs:IssueAgentCertificateForDrs",
				"drs:AssociateFailbackClientToRecoveryInstanceForDrs",
				"drs:GetSuggestedFailbackClientDeviceMappingForDrs",
				"drs:UpdateAgentReplicationInfoForDrs",
				"drs:UpdateFailbackClientDeviceMappingForDrs"
			],
			"Resource": "arn:aws:drs:*:*:recovery-instance/*"
		}
	]
}