Le traduzioni sono generate tramite traduzione automatica. In caso di conflitto tra il contenuto di una traduzione e la versione originale in Inglese, quest'ultima prevarrà.
# AWSElasticDisasterRecoveryConsoleFullAccess\$1v2
**Descrizione**: questa policy fornisce l'accesso completo a tutto il pubblico APIs di AWS Elastic Disaster Recovery (AWS DRS), nonché APIs a tutto il pubblico di altri AWS servizi utilizzati dalla console AWS DRS. Allega questa politica ai tuoi utenti o ruoli.
`AWSElasticDisasterRecoveryConsoleFullAccess_v2`è una [politica AWS gestita](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_managed-vs-inline.html#aws-managed-policies).
## Utilizzo di questa politica
È possibile associare la policy `AWSElasticDisasterRecoveryConsoleFullAccess_v2` a utenti, gruppi e ruoli.
## Dettagli della policy
+ **Tipo**: politica AWS gestita
+ **Ora di creazione**: 27 novembre 2023, 13:35 UTC
+ **Ora modificata:** 12 febbraio 2026, 18:02 UTC
+ **ARN**: `arn:aws:iam::aws:policy/AWSElasticDisasterRecoveryConsoleFullAccess_v2`
## Versione della politica
**Versione della politica:** v9 (predefinita)
La versione predefinita della politica è la versione che definisce le autorizzazioni per la politica. Quando un utente o un ruolo con la politica effettua una richiesta di accesso a una AWS risorsa, AWS controlla la versione predefinita della politica per determinare se consentire la richiesta.
## Documento di policy JSON
```
{
"Version" : "2012-10-17",
"Statement" : [
{
"Sid" : "ConsoleFullAccess1",
"Effect" : "Allow",
"Action" : [
"drs:*"
],
"Resource" : "*"
},
{
"Sid" : "ConsoleFullAccess2",
"Effect" : "Allow",
"Action" : [
"kms:ListAliases",
"kms:DescribeKey"
],
"Resource" : "*"
},
{
"Sid" : "ConsoleFullAccess3",
"Effect" : "Allow",
"Action" : [
"ec2:DescribeAccountAttributes",
"ec2:DescribeAvailabilityZones",
"ec2:DescribeImages",
"ec2:DescribeInstances",
"ec2:DescribeInstanceTypes",
"ec2:DescribeInstanceAttribute",
"ec2:DescribeInstanceStatus",
"ec2:DescribeInstanceTypeOfferings",
"ec2:DescribeLaunchTemplateVersions",
"ec2:DescribeLaunchTemplates",
"ec2:DescribeSecurityGroups",
"ec2:DescribeSnapshots",
"ec2:DescribeSubnets",
"ec2:DescribeVolumes",
"ec2:GetEbsEncryptionByDefault",
"ec2:GetEbsDefaultKmsKeyId",
"ec2:DescribeKeyPairs",
"ec2:DescribeCapacityReservations",
"ec2:DescribeHosts",
"ec2:GetInstanceTypesFromInstanceRequirements"
],
"Resource" : "*"
},
{
"Sid" : "ConsoleFullAccess4",
"Effect" : "Allow",
"Action" : "license-manager:ListLicenseConfigurations",
"Resource" : "*"
},
{
"Sid" : "ConsoleFullAccess5",
"Effect" : "Allow",
"Action" : "resource-groups:ListGroups",
"Resource" : "*"
},
{
"Sid" : "ConsoleFullAccess6",
"Effect" : "Allow",
"Action" : "elasticloadbalancing:DescribeLoadBalancers",
"Resource" : "*"
},
{
"Sid" : "ConsoleFullAccess7",
"Effect" : "Allow",
"Action" : [
"iam:ListInstanceProfiles",
"iam:ListRoles"
],
"Resource" : "*"
},
{
"Sid" : "ConsoleFullAccess8",
"Effect" : "Allow",
"Action" : "iam:PassRole",
"Resource" : [
"arn:aws:iam::*:role/service-role/AWSElasticDisasterRecoveryConversionServerRole",
"arn:aws:iam::*:role/service-role/AWSElasticDisasterRecoveryRecoveryInstanceRole",
"arn:aws:iam::*:role/service-role/AWSElasticDisasterRecoveryRecoveryInstanceWithLaunchActionsRole"
],
"Condition" : {
"StringEquals" : {
"iam:PassedToService" : "ec2.amazonaws.com"
}
}
},
{
"Sid" : "ConsoleFullAccess9",
"Effect" : "Allow",
"Action" : [
"ec2:DeleteSnapshot"
],
"Resource" : "arn:aws:ec2:*:*:snapshot/*",
"Condition" : {
"Null" : {
"aws:ResourceTag/AWSElasticDisasterRecoveryManaged" : "false"
},
"Bool" : {
"aws:ViaAWSService" : "true"
}
}
},
{
"Sid" : "ConsoleFullAccess10",
"Effect" : "Allow",
"Action" : [
"ec2:CreateLaunchTemplateVersion",
"ec2:ModifyLaunchTemplate",
"ec2:DeleteLaunchTemplateVersions",
"ec2:CreateTags",
"ec2:DeleteTags"
],
"Resource" : "arn:aws:ec2:*:*:launch-template/*",
"Condition" : {
"Null" : {
"aws:ResourceTag/AWSElasticDisasterRecoveryManaged" : "false"
}
}
},
{
"Sid" : "ConsoleFullAccess11",
"Effect" : "Allow",
"Action" : [
"ec2:CreateLaunchTemplate"
],
"Resource" : "arn:aws:ec2:*:*:launch-template/*",
"Condition" : {
"Null" : {
"aws:RequestTag/AWSElasticDisasterRecoveryManaged" : "false"
}
}
},
{
"Sid" : "ConsoleFullAccess12",
"Effect" : "Allow",
"Action" : [
"ec2:DeleteVolume"
],
"Resource" : "arn:aws:ec2:*:*:volume/*",
"Condition" : {
"Null" : {
"aws:ResourceTag/AWSElasticDisasterRecoveryManaged" : "false"
},
"Bool" : {
"aws:ViaAWSService" : "true"
}
}
},
{
"Sid" : "ConsoleFullAccess13",
"Effect" : "Allow",
"Action" : [
"ec2:StartInstances",
"ec2:StopInstances",
"ec2:TerminateInstances",
"ec2:ModifyInstanceAttribute",
"ec2:GetConsoleOutput",
"ec2:GetConsoleScreenshot"
],
"Resource" : "arn:aws:ec2:*:*:instance/*",
"Condition" : {
"Null" : {
"aws:ResourceTag/AWSElasticDisasterRecoveryManaged" : "false"
},
"Bool" : {
"aws:ViaAWSService" : "true"
}
}
},
{
"Sid" : "ConsoleFullAccess14",
"Effect" : "Allow",
"Action" : [
"ec2:RevokeSecurityGroupEgress",
"ec2:AuthorizeSecurityGroupIngress",
"ec2:AuthorizeSecurityGroupEgress"
],
"Resource" : "arn:aws:ec2:*:*:security-group/*",
"Condition" : {
"Null" : {
"aws:ResourceTag/AWSElasticDisasterRecoveryManaged" : "false"
},
"Bool" : {
"aws:ViaAWSService" : "true"
}
}
},
{
"Sid" : "ConsoleFullAccess15",
"Effect" : "Allow",
"Action" : [
"ec2:CreateVolume"
],
"Resource" : "arn:aws:ec2:*:*:volume/*",
"Condition" : {
"Null" : {
"aws:RequestTag/AWSElasticDisasterRecoveryManaged" : "false"
},
"Bool" : {
"aws:ViaAWSService" : "true"
}
}
},
{
"Sid" : "ConsoleFullAccess16",
"Effect" : "Allow",
"Action" : "ec2:CreateSecurityGroup",
"Resource" : "arn:aws:ec2:*:*:vpc/*"
},
{
"Sid" : "ConsoleFullAccess17",
"Effect" : "Allow",
"Action" : [
"ec2:CreateSecurityGroup"
],
"Resource" : "arn:aws:ec2:*:*:security-group/*",
"Condition" : {
"Null" : {
"aws:RequestTag/AWSElasticDisasterRecoveryManaged" : "false"
},
"Bool" : {
"aws:ViaAWSService" : "true"
}
}
},
{
"Sid" : "ConsoleFullAccess18",
"Effect" : "Allow",
"Action" : [
"ec2:CreateSnapshot"
],
"Resource" : "arn:aws:ec2:*:*:volume/*",
"Condition" : {
"Null" : {
"ec2:ResourceTag/AWSElasticDisasterRecoveryManaged" : "false"
},
"Bool" : {
"aws:ViaAWSService" : "true"
}
}
},
{
"Sid" : "ConsoleFullAccess19",
"Effect" : "Allow",
"Action" : [
"ec2:CreateSnapshot"
],
"Resource" : "arn:aws:ec2:*:*:snapshot/*",
"Condition" : {
"Null" : {
"aws:RequestTag/AWSElasticDisasterRecoveryManaged" : "false"
},
"Bool" : {
"aws:ViaAWSService" : "true"
}
}
},
{
"Sid" : "ConsoleFullAccess20",
"Effect" : "Allow",
"Action" : [
"ec2:DetachVolume",
"ec2:AttachVolume"
],
"Resource" : "arn:aws:ec2:*:*:instance/*",
"Condition" : {
"Null" : {
"ec2:ResourceTag/AWSElasticDisasterRecoveryManaged" : "false"
},
"Bool" : {
"aws:ViaAWSService" : "true"
}
}
},
{
"Sid" : "ConsoleFullAccess21",
"Effect" : "Allow",
"Action" : [
"ec2:DetachVolume",
"ec2:AttachVolume",
"ec2:StartInstances",
"ec2:GetConsoleOutput",
"ec2:GetConsoleScreenshot"
],
"Resource" : "arn:aws:ec2:*:*:instance/*",
"Condition" : {
"StringEquals" : {
"ec2:ResourceTag/AWSDRS" : "AllowLaunchingIntoThisInstance"
},
"ForAnyValue:StringEquals" : {
"aws:CalledVia" : [
"drs.amazonaws.com"
]
}
}
},
{
"Sid" : "ConsoleFullAccess22",
"Effect" : "Allow",
"Action" : [
"ec2:AttachVolume"
],
"Resource" : "arn:aws:ec2:*:*:volume/*",
"Condition" : {
"Null" : {
"ec2:ResourceTag/AWSElasticDisasterRecoveryManaged" : "false"
},
"Bool" : {
"aws:ViaAWSService" : "true"
}
}
},
{
"Sid" : "ConsoleFullAccess23",
"Effect" : "Allow",
"Action" : [
"ec2:DetachVolume"
],
"Resource" : "arn:aws:ec2:*:*:volume/*",
"Condition" : {
"Bool" : {
"aws:ViaAWSService" : "true"
}
}
},
{
"Sid" : "ConsoleFullAccess24",
"Effect" : "Allow",
"Action" : [
"ec2:RunInstances"
],
"Resource" : "arn:aws:ec2:*:*:instance/*",
"Condition" : {
"Null" : {
"aws:RequestTag/AWSElasticDisasterRecoveryManaged" : "false"
},
"Bool" : {
"aws:ViaAWSService" : "true"
}
}
},
{
"Sid" : "ConsoleFullAccess25",
"Effect" : "Allow",
"Action" : [
"ec2:RunInstances"
],
"Resource" : [
"arn:aws:ec2:*:*:security-group/*",
"arn:aws:ec2:*:*:volume/*",
"arn:aws:ec2:*:*:subnet/*",
"arn:aws:ec2:*:*:image/*",
"arn:aws:ec2:*:*:network-interface/*",
"arn:aws:ec2:*:*:launch-template/*"
],
"Condition" : {
"Bool" : {
"aws:ViaAWSService" : "true"
}
}
},
{
"Sid" : "ConsoleFullAccess26",
"Effect" : "Allow",
"Action" : "ec2:CreateTags",
"Resource" : [
"arn:aws:ec2:*:*:security-group/*",
"arn:aws:ec2:*:*:volume/*",
"arn:aws:ec2:*:*:snapshot/*",
"arn:aws:ec2:*:*:instance/*",
"arn:aws:ec2:*:*:network-interface/*"
],
"Condition" : {
"StringEquals" : {
"ec2:CreateAction" : [
"CreateSecurityGroup",
"CreateVolume",
"CreateSnapshot",
"RunInstances",
"CreateNetworkInterface"
]
},
"Bool" : {
"aws:ViaAWSService" : "true"
}
}
},
{
"Sid" : "ConsoleFullAccess27",
"Effect" : "Allow",
"Action" : "ec2:CreateTags",
"Resource" : "arn:aws:ec2:*:*:launch-template/*",
"Condition" : {
"StringEquals" : {
"ec2:CreateAction" : [
"CreateLaunchTemplate"
]
}
}
},
{
"Sid" : "ConsoleFullAccess28",
"Effect" : "Allow",
"Action" : [
"cloudformation:DescribeStacks",
"cloudformation:ListStacks"
],
"Resource" : "*"
},
{
"Sid" : "ConsoleFullAccess29",
"Effect" : "Allow",
"Action" : [
"s3:GetBucketLocation",
"s3:ListAllMyBuckets"
],
"Resource" : "*"
},
{
"Sid" : "ConsoleFullAccess30",
"Effect" : "Allow",
"Action" : [
"ssm:DescribeInstanceInformation",
"ssm:DescribeParameters"
],
"Resource" : [
"*"
],
"Condition" : {
"ForAnyValue:StringEquals" : {
"aws:CalledVia" : [
"drs.amazonaws.com"
]
}
}
},
{
"Sid" : "ConsoleFullAccess31",
"Effect" : "Allow",
"Action" : [
"ssm:SendCommand",
"ssm:StartAutomationExecution"
],
"Resource" : [
"arn:aws:ssm:*:*:automation-definition/AWS-CreateImage:$DEFAULT",
"arn:aws:ssm:*:*:document/AWSMigration-ValidateNetworkConnectivity",
"arn:aws:ssm:*:*:document/AWSMigration-VerifyMountedVolumes",
"arn:aws:ssm:*:*:document/AWSMigration-ValidateHttpResponse",
"arn:aws:ssm:*:*:document/AWSMigration-ValidateDiskSpace",
"arn:aws:ssm:*:*:document/AWSMigration-VerifyProcessIsRunning",
"arn:aws:ssm:*:*:document/AWSMigration-LinuxTimeSyncSetting",
"arn:aws:ssm:*:*:document/AWSEC2-ApplicationInsightsCloudwatchAgentInstallAndConfigure",
"arn:aws:ssm:*:*:automation-execution/*"
],
"Condition" : {
"ForAnyValue:StringEquals" : {
"aws:CalledVia" : [
"drs.amazonaws.com"
]
}
}
},
{
"Sid" : "ConsoleFullAccess32",
"Effect" : "Allow",
"Action" : [
"ssm:SendCommand"
],
"Resource" : [
"arn:aws:ec2:*:*:instance/*"
],
"Condition" : {
"ForAnyValue:StringEquals" : {
"aws:CalledVia" : [
"drs.amazonaws.com"
]
},
"Null" : {
"aws:ResourceTag/AWSElasticDisasterRecoveryManaged" : "false"
}
}
},
{
"Sid" : "ConsoleFullAccess33",
"Effect" : "Allow",
"Action" : [
"ssm:ListDocuments",
"ssm:ListCommandInvocations"
],
"Resource" : "*"
},
{
"Sid" : "ConsoleFullAccess34",
"Effect" : "Allow",
"Action" : [
"ssm:GetParameter",
"ssm:PutParameter"
],
"Resource" : "arn:aws:ssm:*:*:parameter/ManagedByAWSElasticDisasterRecoveryService-*",
"Condition" : {
"StringEquals" : {
"aws:ResourceAccount" : "${aws:PrincipalAccount}"
}
}
},
{
"Sid" : "ConsoleFullAccess35",
"Effect" : "Allow",
"Action" : [
"ssm:DescribeDocument",
"ssm:GetDocument"
],
"Resource" : "arn:aws:ssm:*:*:document/*"
},
{
"Sid" : "ConsoleFullAccess36",
"Effect" : "Allow",
"Action" : [
"ssm:GetParameters"
],
"Resource" : [
"arn:aws:ssm:*:*:parameter/ManagedByAWSElasticDisasterRecovery-*"
],
"Condition" : {
"ForAnyValue:StringEquals" : {
"aws:CalledVia" : "ssm.amazonaws.com"
}
}
},
{
"Sid" : "ConsoleFullAccess37",
"Effect" : "Allow",
"Action" : [
"ssm:GetAutomationExecution"
],
"Resource" : "arn:aws:ssm:*:*:automation-execution/*",
"Condition" : {
"Null" : {
"aws:ResourceTag/AWSElasticDisasterRecoveryManaged" : "false"
}
}
},
{
"Sid" : "ConsoleFullAccess38",
"Effect" : "Allow",
"Action" : [
"ec2:AssociateIamInstanceProfile"
],
"Resource" : [
"arn:aws:ec2:*:*:instance/*"
],
"Condition" : {
"Null" : {
"aws:ResourceTag/AWSElasticDisasterRecoveryManaged" : "false"
},
"Bool" : {
"aws:ViaAWSService" : "true"
}
}
},
{
"Sid" : "ConsoleFullAccess39",
"Effect" : "Allow",
"Action" : "ec2:CreateFleet",
"Resource" : [
"arn:aws:ec2:*:*:instance/*",
"arn:aws:ec2:*:*:fleet/*",
"arn:aws:ec2:*:*:volume/*",
"arn:aws:ec2:*:*:subnet/*",
"arn:aws:ec2:*:*:image/*",
"arn:aws:ec2:*:*:launch-template/*"
],
"Condition" : {
"ForAnyValue:StringEquals" : {
"aws:CalledVia" : [
"drs.amazonaws.com"
]
}
}
},
{
"Sid" : "ConsoleFullAccess40",
"Effect" : "Allow",
"Action" : "ec2:CreateTags",
"Resource" : [
"arn:aws:ec2:*:*:security-group/*",
"arn:aws:ec2:*:*:volume/*",
"arn:aws:ec2:*:*:snapshot/*",
"arn:aws:ec2:*:*:instance/*"
],
"Condition" : {
"StringEquals" : {
"ec2:CreateAction" : [
"CreateFleet"
]
},
"ForAnyValue:StringEquals" : {
"aws:CalledVia" : [
"drs.amazonaws.com"
]
}
}
},
{
"Sid" : "ConsoleFullAccess41",
"Effect" : "Allow",
"Action" : [
"ec2:CreateVolume"
],
"Resource" : "arn:aws:ec2:*:*:snapshot/*",
"Condition" : {
"Null" : {
"aws:ResourceTag/AWSElasticDisasterRecoveryManaged" : "false"
},
"Bool" : {
"aws:ViaAWSService" : "true"
}
}
},
{
"Sid" : "ConsoleFullAccess42",
"Effect" : "Allow",
"Action" : [
"ec2:CreateNetworkInterface"
],
"Resource" : "arn:aws:ec2:*:*:network-interface/*",
"Condition" : {
"Null" : {
"aws:RequestTag/AWSElasticDisasterRecoveryManaged" : "false"
},
"Bool" : {
"aws:ViaAWSService" : "true"
}
}
},
{
"Sid" : "ConsoleFullAccess43",
"Effect" : "Allow",
"Action" : [
"ec2:CreateNetworkInterface"
],
"Resource" : [
"arn:aws:ec2:*:*:subnet/*",
"arn:aws:ec2:*:*:security-group/*"
]
},
{
"Sid" : "ConsoleFullAccess44",
"Effect" : "Allow",
"Action" : [
"ec2:CreateNetworkInterfacePermission"
],
"Resource" : "arn:aws:ec2:*:*:network-interface/*",
"Condition" : {
"Null" : {
"aws:ResourceTag/AWSElasticDisasterRecoveryManaged" : "false"
},
"Bool" : {
"aws:ViaAWSService" : "true"
}
}
}
]
}
```
## Ulteriori informazioni
+ [Crea un set di autorizzazioni utilizzando le policy AWS gestite in IAM Identity Center](https://docs.aws.amazon.com/singlesignon/latest/userguide/howtocreatepermissionset.html)
+ [Aggiungere e rimuovere i permessi di identità IAM](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_manage-attach-detach.html)
+ [Comprendi il controllo delle versioni per le politiche IAM](https://docs.aws.amazon.com//IAM/latest/UserGuide/access_policies_managed-versioning.html)
+ [Inizia con le policy AWS gestite e passa alle autorizzazioni con privilegi minimi](https://docs.aws.amazon.com//IAM/latest/UserGuide/best-practices.html#bp-use-aws-defined-policies)