AWS managed policies for AWS Elastic Disaster Recovery

Created new revisions of AWSElasticDisasterRecoveryServiceRolePolicy, AWSElasticDisasterRecoveryConsoleFullAccess_v2 and AWSElasticDisasterRecoveryConsoleFullAccess managed policies to support a change in authentication with EBS APIs.

Created new revisions of AWSElasticDisasterRecoveryConsoleFullAccess_v2 and AWSElasticDisasterRecoveryLaunchActionsPolicy managed policies, to support additional parameter types in SSM Parameters Store for post-launch actions.

AWSElasticDisasterRecoveryServiceRolePolicy – Updated policy

Created revision of the AWSElasticDisasterRecoveryServiceRolePolicy policy, to support replicating marketplace licenses to launched instances.

AWSElasticDisasterRecoveryCrossAccountReplicationPolicy – Updated policy

Created revision of the AWSElasticDisasterRecoveryCrossAccountReplicationPolicy policy, to support replicating marketplace licenses to launched instances.

Created new revisions of managed policies to support managed prefix lists for DRS network replication and recovery.

Created new revisions of managed policies to support DRS to GovCloud and added Sid to statements in managed policies

November 27, 2023

AWSElasticDisasterRecoveryCrossAccountReplicationPolicy – Updated policy

Created revision of AWSElasticDisasterRecoveryCrossAccountReplicationPolicy to support DRS in GovCloud

AWSElasticDisasterRecoveryReadOnlyAccess – Updated policy

AWS Elastic Disaster Recovery updated the policy with additional read-only permissions for post-launch actions.

AWSElasticDisasterRecoveryConsoleFullAccess_v2 New policy

AWS Elastic Disaster Recovery added a new policy. This policy provides access to use DRS console. Attach this policy to your IAM roles or users.

AWSElasticDisasterRecoveryConsoleFullAccess – Updated policy

AWS Elastic Disaster Recovery updated the policy to allow launching into an existing instance.

AWSElasticDisasterRecoveryConsoleFullAccess – Updated policy

AWS Elastic Disaster Recovery updated the policy to allow launching into an existing instance.

AWSElasticDisasterRecoveryLaunchActionsPolicy – Updated policy

AWS Elastic Disaster Recovery updated the policy to allow launching into an existing instance tagged with a specific AWS-only key-value pair.

AWSElasticDisasterRecoveryEc2InstancePolicy – Updated policy

AWS Elastic Disaster Recovery updated the policy to allow sending installation result metrics to AWS Elastic Disaster Recovery.

AWSElasticDisasterRecoveryAgentInstallationPolicy – Updated policy

AWS Elastic Disaster Recovery updated the policy to allow sending installation result metrics to AWS Elastic Disaster Recovery.

AWSElasticDisasterRecoveryLaunchActionsPolicy New policy

AWS Elastic Disaster Recovery added a new policy. This policy provides access to use post-launch actions. Attach this policy to your IAM roles or users.

AWSElasticDisasterRecoveryReadOnlyAccess – Updated policy

AWS Elastic Disaster Recovery updated the policy with new read-only APIs for post-launch actions.

AWSElasticDisasterRecoveryAgentInstallationPolicy – Updated policy

AWS Elastic Disaster Recovery updated the policy to allow network replication and recovery.

AWSElasticDisasterRecoveryNetworkReplicationPolicy – New policy

This policy is used by AWS Elastic Disaster Recovery (DRS) to support network replication.

AWSElasticDisasterRecoveryServiceRolePolicy – Updated policy

This policy was updated to support network replication and recovery.

AWSElasticDisasterRecoveryCrossAccountReplicationPolicy – New policy

This policy is used by AWS Elastic Disaster Recovery (DRS) to support replication and failback.

AWSElasticDisasterRecoveryRecoveryInstancePolicy – Updated policy

This policy was updated to support failback by the agent after reverse replication.

AWSElasticDisasterRecoveryCrossAccountReplicationPolicy – New policy

This policy is used by AWS Elastic Disaster Recovery (DRS) to support cross-account replication and cross-account failback.

AWSElasticDisasterRecoveryRecoveryInstancePolicy – Updated policy

This policy was updated to support cross-account failback by the agent after reverse replication.

AWSElasticDisasterRecoveryAgentPolicy – Updated policy

This policy was updated to support the kernel upgrade feature.

AWSElasticDisasterRecoveryStagingAccountPolicy_v2 – New policy

This policy was updated to support the kernel upgrade feature.

AWSElasticDisasterRecoveryAgentInstallationPolicy – Updated policy

AWS Elastic Disaster Recovery updated the policy to properly support agent installation on Recovery Instances. This policy allows installing the AWS Replication Agent, which is used with AWS Elastic Disaster Recovery (AWS DRS) to recover external servers to AWS. Attach this policy to your users or roles whose credentials you provide during the installation step of the AWS Replication Agent.

AWSElasticDisasterRecoveryRecoveryInstancePolicy – Updated policy

AWS Elastic Disaster Recovery updated this policy to include permissions which allow DRS Recovery Instances that originated from EC2 instances to replicate back to their origin locations in a failback scenario. As an additional security mechanism, Elastic Disaster Recovery will block requests that are not targeted at the source server the EC2 instance is associated with.

AWSElasticDisasterRecoveryAgentInstallationPolicy – Updated policy

AWS Elastic Disaster Recovery updated the policy to include resource tagging. This policy allows installing the AWS Replication Agent, which is used with AWS Elastic Disaster Recovery (AWS DRS) to recover external servers to AWS. Attach this policy to your users or roles whose credentials you provide during the installation step of the AWS Replication Agent.

AWSElasticDisasterRecoveryFailbackInstallationPolicy – Updated policy

AWS Elastic Disaster Recovery updated this policy to include a new permission (drs:UpdateAgentReplicationInfoForDrs). This permission is needed to complete the failback process in some cases.

AWSElasticDisasterRecoveryServiceRolePolicy – Updated policy

AWS Elastic Disaster Recovery updated the policy to allow DRS to call cloudwatch:GetMetricData and also ec2:ModifyVolume on EBS volumes of the replication server in order to support the automatic volume type selection feature.

AWSElasticDisasterRecoveryReplicationServerPolicy – Updated policy

AWS Elastic Disaster Recovery updated the policy to allow replication servers to call drs:NotifyVolumeEventForDrs and drs:SendVolumeStatsForDrs.

AWSElasticDisasterRecoveryConsoleFullAccess – Updated policy

AWS Elastic Disaster Recovery updated the policy to allow listing IAM roles.

AWSElasticDisasterRecoveryReadOnlyAccess – Updated policy

AWS Elastic Disaster Recovery updated the policy with new read-only APIs of DRS and also added a permission that allows to list IAM roles.

AWSElasticDisasterRecoveryEc2InstancePolicy – Updated policy

AWS Elastic Disaster Recovery added a new policy. This policy allows installing and using the AWS Replication Agent, which is used by AWS Elastic Disaster Recovery (DRS) to recover source servers that run on EC2 (cross-region or cross-AZ). An IAM role with this policy should be attached (as an EC2 Instance Profile) to the EC2 Instances.

AWSElasticDisasterRecoveryReadOnlyAccess – Updated policy

AWS Elastic Disaster Recovery updated this policy.

AWSElasticDisasterRecoveryStagingAccountPolicy – New policy

AWS Elastic Disaster Recovery added a new policy. This policy allows read-only access to AWS Elastic Disaster Recovery (DRS) resources such as source servers and jobs. It also allows creating a converted snapshot and sharing that EBS snapshot with a specified account.

AWSElasticDisasterRecoveryAgentPolicy – New policy

AWS Elastic Disaster Recovery added a new policy. This policy allows using the AWS Replication Agent, which is used with AWS Elastic Disaster Recovery to recover source servers to AWS. We do not recommend that you attach this policy to your users or roles.

AWSElasticDisasterRecoveryConversionServerPolicy New policy

AWS Elastic Disaster Recovery added a new policy. This policy is attached to the AWS Elastic Disaster Recovery Conversion server’s instance role.

This policy allows Elastic Disaster Recovery (DRS) Conversion Servers, which are EC2 instances launched by Elastic Disaster Recovery, to communicate with the DRS service. An IAM role with this policy is attached (as an EC2 Instance Profile) by DRS to the DRS Conversion Servers, which are automatically launched and terminated by DRS, when needed. We do not recommend that you attach this policy to your users or roles. AWS DRS conversion servers are used by AWS Elastic Disaster Recovery when users choose to recover source servers using the Elastic Disaster Recovery console, CLI, or API.

AWSElasticDisasterRecoveryFailbackPolicy - New policy

AWS Elastic Disaster Recovery added a new policy. This policy allows using the AWS Elastic Disaster Recovery Failback Client, which is used to failback Recovery Instances back to your original source infrastructure. We do not recommend that you attach this policy to your users or roles.

AWSElasticDisasterRecoveryFailbackInstallationPolicy – New policy

AWS Elastic Disaster Recovery added a new policy. You can attach the AWSElasticDisasterRecoveryFailbackInstallationPolicy policy to your IAM identities. This policy allows installing the AWS Elastic Disaster Recovery Failback Client, which is used to failback recovery instances back to your original source infrastructure. Attach this policy to your users or roles whose credentials you provide when running the EAWS Elastic Disaster Recovery Failback Client.

AWSElasticDisasterRecoveryConsoleFullAccess – New policy

AWS Elastic Disaster Recovery added a new policy. This policy provides full access to all public APIs of AWS Elastic Disaster Recovery (AWS DRS), as well as permissions to read KMS key, License Manager, Resource Groups, Elastic Load Balancing, IAM, and Amazon EC2 information. Attach this policy to your users or roles.

AWSElasticDisasterRecoveryReplicationServerPolicy – New policy

AWS Elastic Disaster Recovery added a new policy. This policy is attached to the Elastic Disaster Recovery Replication server’s instance role.

This policy allows the Elastic Disaster Recovery (DRS) Replication Servers, which are EC2 instances launched by Elastic Disaster Recovery, to communicate with the DRS service, and to create EBS snapshots in your AWS account. An IAM role with this policy is attached (as an EC2 Instance Profile) by Elastic Disaster Recovery to the DRS Replication Servers which are automatically launched and terminated by DRS, as needed. DRS Replication Servers are used to facilitate data replication from your external servers to AWS, as part of the recovery process managed by DRS. We do not recommend that you attach this policy to your users or roles.

AWSElasticDisasterRecoveryRecoveryInstancePolicy – New policy

AWS Elastic Disaster Recovery added a new policy. This policy is attached to the instance role of Elastic Disaster Recovery's Recovery Instance.

This policy allows the Elastic Disaster Recovery (DRS) Recovery Instance, which are EC2 instances launched by Elastic Disaster Recovery - to communicate with the DRS service, and to be able to failback to their original source infrastructure. An IAM role with this policy is attached (as an EC2 Instance Profile) by Elastic Disaster Recovery to the DRS recovery instances. We do not recommend that you attach this policy to your users or roles.

AWSElasticDisasterRecoveryServiceRolePolicy – New policy

AWS Elastic Disaster Recovery added a new policy. This policy allows Elastic Disaster Recovery to manage AWS resources on your behalf.

AWS Elastic Disaster Recovery started tracking changes

AWS Elastic Disaster Recovery started tracking changes for AWS managed policies.