AWS Elastic Disaster Recovery (drs)

Additions

Actions

• CancelRecoveryPlanExecution
  
  • Description:  Grants permission to cancel a recovery plan execution
  • Access:  Write
  • Resources: 

    Name: RecoveryPlanExecutionResource

    Required: Yes

• CreateRecoveryPlan
  
  • Description:  Grants permission to create a recovery plan
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateRecoveryPlanStep
  
  • Description:  Grants permission to create a step in a recovery plan
  • Access:  Write
  • Resources: 

    Name: RecoveryPlanResource

    Required: Yes

• DeleteRecoveryPlan
  
  • Description:  Grants permission to delete a recovery plan
  • Access:  Write
  • Resources: 

    Name: RecoveryPlanResource

    Required: Yes

• DeleteRecoveryPlanExecution
  
  • Description:  Grants permission to delete a recovery plan execution
  • Access:  Write
  • Resources: 

    Name: RecoveryPlanExecutionResource

    Required: Yes

• DeleteRecoveryPlanStep
  
  • Description:  Grants permission to delete a recovery plan step
  • Access:  Write
  • Resources: 

    Name: RecoveryPlanResource

    Required: Yes

• GetRecoveryPlan
  
  • Description:  Grants permission to get a recovery plan
  • Access:  Read
  • Resources: 

    Name: RecoveryPlanResource

    Required: Yes

• GetRecoveryPlanExecution
  
  • Description:  Grants permission to get a recovery plan execution
  • Access:  Read
  • Resources: 

    Name: RecoveryPlanExecutionResource

    Required: Yes

• GetRecoveryPlanExecutionStep
  
  • Description:  Grants permission to get a recovery plan execution step
  • Access:  Read
  • Resources: 

    Name: RecoveryPlanExecutionResource

    Required: Yes

• GetRecoveryPlanStep
  
  • Description:  Grants permission to get a recovery plan step
  • Access:  Read
  • Resources: 

    Name: RecoveryPlanResource

    Required: Yes

• ListRecoveryPlanExecutionSteps
  
  • Description:  Grants permission to list recovery plan execution steps
  • Access:  Read
  • Resources: 

    Name: RecoveryPlanExecutionResource

    Required: Yes

• ListRecoveryPlanExecutions
  
  • Description:  Grants permission to list recovery plan executions
  • Access:  Read
  • Resources: 

    Name: RecoveryPlanResource

    Required: Yes

• ListRecoveryPlanSteps
  
  • Description:  Grants permission to list recovery plan steps
  • Access:  Read
  • Resources: 

    Name: RecoveryPlanResource

    Required: Yes

• ListRecoveryPlans
  
  • Description:  Grants permission to list recovery plans
  • Access:  Read
• ReorderRecoveryPlanSteps
  
  • Description:  Grants permission to reorder steps in a recovery plan
  • Access:  Write
  • Resources: 

    Name: RecoveryPlanResource

    Required: Yes

• RetryRecoveryPlanExecutionStep
  
  • Description:  Grants permission to retry a recovery plan execution step
  • Access:  Write
  • Resources: 

    Name: RecoveryPlanExecutionResource

    Required: Yes

• StartRecoveryPlanExecution
  
  • Description:  Grants permission to start a recovery plan execution
  • Access:  Write
  • Resources: 

    Name: RecoveryPlanResource

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• UpdateRecoveryPlan
  
  • Description:  Grants permission to update a recovery plan
  • Access:  Write
  • Resources: 

    Name: RecoveryPlanResource

    Required: Yes

• UpdateRecoveryPlanExecutionStep
  
  • Description:  Grants permission to update a recovery plan execution step
  • Access:  Write
  • Resources: 

    Name: RecoveryPlanExecutionResource

    Required: Yes

• UpdateRecoveryPlanStep
  
  • Description:  Grants permission to update a recovery plan step
  • Access:  Write
  • Resources: 

    Name: RecoveryPlanResource

    Required: Yes

Resources

• RecoveryPlanExecutionResource
  
  • Arn:  arn:${Partition}:drs:${Region}:${Account}:recovery-plan-execution/${RecoveryPlanExecutionID}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• RecoveryPlanResource
  
  • Arn:  arn:${Partition}:drs:${Region}:${Account}:recovery-plan/${RecoveryPlanID}
  • Conditions: 

    aws:ResourceTag/${TagKey}