AWS managed policies for Amazon Application Recovery Controller (ARC)

AWSServiceRoleForPercPracticePolicy – New policy

ARC added a new service-linked role for autoshift and practice runs.

ARC uses the permissions enabled by the service-linked role to monitor customer-provided Amazon CloudWatch alarms and customer AWS Health Dashboard events for practice runs, and to start practice runs.

To learn more about the new service-linked role, see Service-linked role permissions for AWSServiceRoleForZonalAutoshiftPracticeRun.

AmazonRoute53RecoveryControlConfigReadOnlyAccess – Updated policy

Adds permissions for GetResourcePolicy, to support returning details about AWS Resource Access Manager resource policies for shared resources.

Route53RecoveryReadinessServiceRolePolicy – Updated policy

ARC added new permissions to query information about Amazon EC2 instances.

ARC uses the following permissions to support polling Amazon EC2 instances, to run readiness checks and determine the readiness status for the instances.

ec2:DescribeVpnGateways

ec2:DescribeCustomerGateways

Route53RecoveryReadinessServiceRolePolicy – Updated policy

ARC added a new permission to query information about Lambda functions.

ARC uses the following permission to query information about Lambda functions to run readiness checks and determine the readiness status for the functions.

lambda:ListProvisionedConcurrencyConfigs

AmazonRoute53RecoveryControlConfigFullAccess – Updated policy

Removed Amazon Route 53 permissions from the policy and added note listing the optional permissions.

AmazonRoute53RecoveryControlConfigFullAccess – Updated policy

Added missing required Amazon Route 53 permissions to the policy.

AmazonRoute53RecoveryClusterReadOnlyAccess – Updated policy

ARC added a new permission, route53-recovery-cluster:ListRoutingControls, to allow listing routing control ARNs with high availability.

AmazonRoute53RecoveryControlConfigReadOnlyAccess – Updated policy

ARC added a new permission, route53-recovery-control-config:ListTagsForResources, to allow listing tags for a resource.

Route53RecoveryReadinessServiceRolePolicy – Updated policy

ARC added a new permission to query information about Amazon API Gateway.

ARC uses the permission, apigateway:GET, to query information about API Gateway to run readiness checks and determine the readiness status.

AmazonRoute53RecoveryReadinessReadOnlyAccess – Added new permissions

ARC added two new permissions to AmazonRoute53RecoveryReadinessReadOnlyAccess:

ARC uses route53-recovery-readiness:GetArchitectureRecommendations and route53-recovery-readiness:GetCellReadinessSummary to allow read-only access to these actions for working with recovery readiness.

Route53RecoveryReadinessServiceRolePolicy – Updated policy

ARC added new permissions to query information about Lambda functions.

ARC uses the following permissions to query information about Lambda functions to run readiness checks and determine the readiness status for those functions.

lambda:GetFunctionConcurrency

lambda:GetFunctionConfiguration

lambda:GetProvisionedConcurrencyConfig

lambda:ListAliases

lambda:ListVersionsByFunction

lambda:ListEventSourceMappings

lambda:ListFunctions

Route53RecoveryReadinessServiceRolePolicy – Added new managed policies

ARC added the following new managed policies:

AmazonRoute53RecoveryReadinessFullAccess

AmazonRoute53RecoveryReadinessReadOnlyAccess

AmazonRoute53RecoveryClusterFullAccess

AmazonRoute53RecoveryClusterReadOnlyAccess

AmazonRoute53RecoveryControlConfigFullAccess

AmazonRoute53RecoveryControlConfigReadOnlyAccess

ARC started tracking changes

ARC started tracking changes for its AWS managed policies.