AWSElasticDisasterRecoveryStagingAccountPolicy_v2
Description: This policy is used by AWS Elastic Disaster Recovery (DRS) to recover source servers into a separate target account and to allow failing back. We do not recommend that you attach this policy to your IAM users or roles.
AWSElasticDisasterRecoveryStagingAccountPolicy_v2
is an AWS managed policy.
Using this policy
You can attach AWSElasticDisasterRecoveryStagingAccountPolicy_v2
to your users, groups, and roles.
Policy details
-
Type: Service role policy
-
Creation time: January 05, 2023, 12:11 UTC
-
Edited time: November 27, 2023, 13:32 UTC
-
ARN:
arn:aws:iam::aws:policy/service-role/AWSElasticDisasterRecoveryStagingAccountPolicy_v2
Policy version
Policy version: v2 (default)
The policy's default version is the version that defines the permissions for the policy. When a user or role with the policy makes a request to access an AWS resource, AWS checks the default version of the policy to determine whether to allow the request.
JSON policy document
{ "Version" : "2012-10-17", "Statement" : [ { "Sid" : "DRSStagingAccountPolicyv21", "Effect" : "Allow", "Action" : [ "drs:DescribeSourceServers", "drs:DescribeRecoverySnapshots", "drs:CreateConvertedSnapshotForDrs", "drs:GetReplicationConfiguration", "drs:DescribeJobs", "drs:DescribeJobLogItems" ], "Resource" : "*" }, { "Sid" : "DRSStagingAccountPolicyv22", "Effect" : "Allow", "Action" : [ "ec2:ModifySnapshotAttribute" ], "Resource" : "arn:aws:ec2:*:*:snapshot/*", "Condition" : { "StringEquals" : { "ec2:Add/userId" : "${aws:SourceIdentity}" }, "Null" : { "aws:ResourceTag/AWSElasticDisasterRecoveryManaged" : "false" } } }, { "Sid" : "DRSStagingAccountPolicyv23", "Effect" : "Allow", "Action" : "drs:IssueAgentCertificateForDrs", "Resource" : [ "arn:aws:drs:*:*:source-server/*" ] } ] }