diff --git a/docs/source/_static/managed-policies/AWSElasticDisasterRecoveryConsoleFullAccess_v2.json b/docs/source/_static/managed-policies/AWSElasticDisasterRecoveryConsoleFullAccess_v2.json index 7d0056dda..2eeb0173e 100644 --- a/docs/source/_static/managed-policies/AWSElasticDisasterRecoveryConsoleFullAccess_v2.json +++ b/docs/source/_static/managed-policies/AWSElasticDisasterRecoveryConsoleFullAccess_v2.json @@ -370,7 +370,8 @@ "arn:aws:ec2:*:*:security-group/*", "arn:aws:ec2:*:*:volume/*", "arn:aws:ec2:*:*:snapshot/*", - "arn:aws:ec2:*:*:instance/*" + "arn:aws:ec2:*:*:instance/*", + "arn:aws:ec2:*:*:network-interface/*" ], "Condition": { "StringEquals": { @@ -378,7 +379,8 @@ "CreateSecurityGroup", "CreateVolume", "CreateSnapshot", - "RunInstances" + "RunInstances", + "CreateNetworkInterface" ] }, "Bool": { @@ -600,6 +602,65 @@ ] } } + }, + { + "Sid": "ConsoleFullAccess41", + "Effect": "Allow", + "Action": [ + "ec2:CreateVolume" + ], + "Resource": "arn:aws:ec2:*:*:snapshot/*", + "Condition": { + "Null": { + "aws:ResourceTag/AWSElasticDisasterRecoveryManaged": "false" + }, + "Bool": { + "aws:ViaAWSService": "true" + } + } + }, + { + "Sid": "ConsoleFullAccess42", + "Effect": "Allow", + "Action": [ + "ec2:CreateNetworkInterface" + ], + "Resource": "arn:aws:ec2:*:*:network-interface/*", + "Condition": { + "Null": { + "aws:RequestTag/AWSElasticDisasterRecoveryManaged": "false" + }, + "Bool": { + "aws:ViaAWSService": "true" + } + } + }, + { + "Sid": "ConsoleFullAccess43", + "Effect": "Allow", + "Action": [ + "ec2:CreateNetworkInterface" + ], + "Resource": [ + "arn:aws:ec2:*:*:subnet/*", + "arn:aws:ec2:*:*:security-group/*" + ] + }, + { + "Sid": "ConsoleFullAccess44", + "Effect": "Allow", + "Action": [ + "ec2:CreateNetworkInterfacePermission" + ], + "Resource": "arn:aws:ec2:*:*:network-interface/*", + "Condition": { + "Null": { + "aws:ResourceTag/AWSElasticDisasterRecoveryManaged": "false" + }, + "Bool": { + "aws:ViaAWSService": "true" + } + } } ] } \ No newline at end of file diff --git a/docs/source/_static/managed-policies/AWSElasticDisasterRecoveryServiceRolePolicy.json b/docs/source/_static/managed-policies/AWSElasticDisasterRecoveryServiceRolePolicy.json index 65f23139c..6dd1a821f 100644 --- a/docs/source/_static/managed-policies/AWSElasticDisasterRecoveryServiceRolePolicy.json +++ b/docs/source/_static/managed-policies/AWSElasticDisasterRecoveryServiceRolePolicy.json @@ -66,7 +66,8 @@ "ec2:DescribeDhcpOptions", "ec2:DescribeManagedPrefixLists", "ec2:GetManagedPrefixListEntries", - "ec2:GetManagedPrefixListAssociations" + "ec2:GetManagedPrefixListAssociations", + "ec2:DescribeNetworkInterfaces" ], "Resource": "*" }, @@ -327,7 +328,8 @@ "arn:aws:ec2:*:*:security-group/*", "arn:aws:ec2:*:*:volume/*", "arn:aws:ec2:*:*:snapshot/*", - "arn:aws:ec2:*:*:instance/*" + "arn:aws:ec2:*:*:instance/*", + "arn:aws:ec2:*:*:network-interface/*" ], "Condition": { "StringEquals": { @@ -336,7 +338,8 @@ "CreateSecurityGroup", "CreateVolume", "CreateSnapshot", - "RunInstances" + "RunInstances", + "CreateNetworkInterface" ] } } @@ -359,6 +362,68 @@ "Effect": "Allow", "Action": "cloudwatch:GetMetricData", "Resource": "*" + }, + { + "Sid": "DRSServiceRolePolicy29", + "Effect": "Allow", + "Action": [ + "ec2:CreateVolume" + ], + "Resource": "arn:aws:ec2:*:*:snapshot/*", + "Condition": { + "Null": { + "aws:ResourceTag/AWSElasticDisasterRecoveryManaged": "false" + } + } + }, + { + "Sid": "DRSServiceRolePolicy30", + "Effect": "Allow", + "Action": [ + "ec2:CreateNetworkInterface" + ], + "Resource": "arn:aws:ec2:*:*:network-interface/*", + "Condition": { + "Null": { + "aws:RequestTag/AWSElasticDisasterRecoveryManaged": "false" + } + } + }, + { + "Sid": "DRSServiceRolePolicy31", + "Effect": "Allow", + "Action": [ + "ec2:CreateNetworkInterface" + ], + "Resource": [ + "arn:aws:ec2:*:*:subnet/*", + "arn:aws:ec2:*:*:security-group/*" + ] + }, + { + "Sid": "DRSServiceRolePolicy32", + "Effect": "Allow", + "Action": [ + "ec2:CreateNetworkInterfacePermission", + "ec2:DeleteNetworkInterface", + "ec2:ModifyNetworkInterfaceAttribute" + ], + "Resource": "arn:aws:ec2:*:*:network-interface/*", + "Condition": { + "Null": { + "aws:ResourceTag/AWSElasticDisasterRecoveryManaged": "false" + } + } + }, + { + "Sid": "DRSServiceRolePolicy33", + "Effect": "Allow", + "Action": [ + "ec2:ModifyNetworkInterfaceAttribute" + ], + "Resource": [ + "arn:aws:ec2:*:*:instance/*" + ] } ] } \ No newline at end of file