View a markdown version of this page

Manual approval execution block sample policy - Amazon Application Recovery Controller (ARC)

Manual approval execution block sample policy

The following is a sample policy to attach if you add execution blocks to a Region switch plan for manual approvals.

JSON
{
  "Version":"2012-10-17",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "arc-region-switch:ApprovePlanExecutionStep"
      ],
      "Resource": "arn:aws:arc-region-switch::123456789012:plan/sample-plan:0123abc"
    }
  ]
}
Note

In addition to this IAM policy, the role used to create or update a plan with a manual approval execution block requires iam:PassRole permission for the manual approval role.