AWS managed policy: AWSElasticDisasterRecoveryAgentPolicy

PDFRSS

This policy gives the AWS Replication Agent, which is used with AWS Elastic Disaster Recovery (AWS DRS) to replicate source servers to AWS, permissions to communicate with AWS DRS to receive instructions and to send logs and metrics. We do not recommend that you attach this policy to your users or roles.

Permissions details

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Sid": "DRSAgentPolicy1",
			"Effect": "Allow",
			"Action": [
				"drs:SendAgentMetricsForDrs",
				"drs:SendAgentLogsForDrs",
				"drs:UpdateAgentSourcePropertiesForDrs",
				"drs:UpdateAgentReplicationInfoForDrs",
				"drs:UpdateAgentConversionInfoForDrs",
				"drs:GetAgentCommandForDrs",
				"drs:GetAgentConfirmedResumeInfoForDrs",
				"drs:GetAgentRuntimeConfigurationForDrs",
				"drs:UpdateAgentBacklogForDrs",
				"drs:GetAgentReplicationInfoForDrs",
				"drs:IssueAgentCertificateForDrs"
			],
			"Resource": "arn:aws:drs:*:*:source-server/${aws:SourceIdentity}"
		},
		{
			"Sid": "DRSAgentPolicy2",
			"Effect": "Allow",
			"Action": [
				"drs:GetAgentInstallationAssetsForDrs"
			],
			"Resource": "*"
		}
	]
}