Amazon managed policies for readiness check in Amazon Route 53 Application Recovery Controller
An Amazon managed policy is a standalone policy that is created and administered by Amazon. Amazon managed policies are designed to provide permissions for many common use cases so that you can start assigning permissions to users, groups, and roles.
Keep in mind that Amazon managed policies might not grant least-privilege permissions for your specific use cases because they're available for all Amazon customers to use. We recommend that you reduce permissions further by defining customer managed policies that are specific to your use cases.
You cannot change the permissions defined in Amazon managed policies. If Amazon updates the permissions defined in an Amazon managed policy, the update affects all principal identities (users, groups, and roles) that the policy is attached to. Amazon is most likely to update an Amazon managed policy when a new Amazon Web Service is launched or new API operations become available for existing services.
For more information, see Amazon managed policies in the IAM User Guide.
Amazon managed policy: Route53RecoveryReadinessServiceRolePolicy
You can't attach Route53RecoveryReadinessServiceRolePolicy to your IAM entities.
This policy is attached to a service-linked role that allows Amazon Route 53 Application Recovery Controller to access Amazon
services and resources that are used or managed by Route 53 ARC. For more information, see
Using service-linked role for readiness check in Route 53 ARC.
Amazon managed policy: AmazonRoute53RecoveryReadinessFullAccess
You can attach AmazonRoute53RecoveryReadinessFullAccess to your IAM entities.
This policy grants full access to actions for working with recovery readiness (readiness check) in Route 53 ARC. Attach
it to IAM users and other principals who need full access to recovery readiness actions.
To view the permissions for this policy, see AmazonRoute53RecoveryReadinessFullAccess in the Amazon Managed Policy Reference.
Amazon managed policy: AmazonRoute53RecoveryReadinessReadOnlyAccess
You can attach AmazonRoute53RecoveryReadinessReadOnlyAccess to your IAM entities.
This policy grants read-only access to actions for working with recovery readiness in Route 53 ARC. It's
useful for users who need to view readiness statuses and recovery group configurations. These
users can't create, update, or delete recovery readiness resources.
To view the permissions for this policy, see AmazonRoute53RecoveryReadinessReadOnlyAccess in the Amazon Managed Policy Reference.
Updates for Amazon managed policies for readiness
For details about updates to Amazon managed policies for readiness check in Route 53 ARC since this service began tracking these changes, see Updates to Amazon managed policies for Amazon Route 53 Application Recovery Controller. For automatic alerts about changes to this page, subscribe to the RSS feed on the Route 53 ARC Document history page.