Amazon managed policies for readiness check in Amazon Application Recovery Controller (ARC)
An Amazon managed policy is a standalone policy that is created and administered by Amazon. Amazon managed policies are designed to provide permissions for many common use cases so that you can start assigning permissions to users, groups, and roles.
Keep in mind that Amazon managed policies might not grant least-privilege permissions for your specific use cases because they're available for all Amazon customers to use. We recommend that you reduce permissions further by defining customer managed policies that are specific to your use cases.
You cannot change the permissions defined in Amazon managed policies. If Amazon updates the permissions defined in an Amazon managed policy, the update affects all principal identities (users, groups, and roles) that the policy is attached to. Amazon is most likely to update an Amazon managed policy when a new Amazon Web Services service is launched or new API operations become available for existing services.
For more information, see Amazon managed policies in the IAM User Guide.
Amazon managed policy: Route53RecoveryReadinessServiceRolePolicy
You can't attach Route53RecoveryReadinessServiceRolePolicy to your IAM entities.
This policy is attached to a service-linked role that allows Amazon Application Recovery Controller (ARC) to access Amazon
services and resources that are used or managed by ARC. For more information, see
Using service-linked role for readiness check in ARC.
Amazon managed policy: AmazonRoute53RecoveryReadinessFullAccess
You can attach AmazonRoute53RecoveryReadinessFullAccess to your IAM entities.
This policy grants full access to actions for working with recovery readiness (readiness check) in ARC. Attach
it to IAM users and other principals who need full access to recovery readiness actions.
To view the permissions for this policy, see AmazonRoute53RecoveryReadinessFullAccess in the Amazon Managed Policy Reference.
Amazon managed policy: AmazonRoute53RecoveryReadinessReadOnlyAccess
You can attach AmazonRoute53RecoveryReadinessReadOnlyAccess to your IAM entities.
This policy grants read-only access to actions for working with recovery readiness in ARC. It's
useful for users who need to view readiness statuses and recovery group configurations. These
users can't create, update, or delete recovery readiness resources.
To view the permissions for this policy, see AmazonRoute53RecoveryReadinessReadOnlyAccess in the Amazon Managed Policy Reference.
Updates for Amazon managed policies for readiness
For details about updates to Amazon managed policies for readiness check in ARC since this service began tracking these changes, see Updates to Amazon managed policies for Amazon Application Recovery Controller (ARC). For automatic alerts about changes to this page, subscribe to the RSS feed on the ARC Document history page.