翻訳は機械翻訳により提供されています。提供された翻訳内容と英語版の間で齟齬、不一致または矛盾がある場合、英語版が優先します。
AWSApplicationMigrationFSxProxyVPCPolicy
説明: AWS Application Migration Service とお客様の FSx ファイルシステム間の PrivateLink を管理するアクセス許可を提供します
AWSApplicationMigrationFSxProxyVPCPolicy は AWS マネージドポリシーです。
このポリシーを使用すると
ユーザー、グループおよびロールに AWSApplicationMigrationFSxProxyVPCPolicy をアタッチできます。
ポリシーの詳細
-
タイプ: サービスロールポリシー
-
作成日時: 2026 年 5 月 31 日 13:27 UTC
-
編集日時: 2026 年 5 月 31 日 13:27 UTC
-
ARN:
arn:aws:iam::aws:policy/service-role/AWSApplicationMigrationFSxProxyVPCPolicy
ポリシーのバージョン
ポリシーのバージョン: v1 (デフォルト)
ポリシーのデフォルトバージョンは、ポリシーのアクセス許可を定義するバージョンです。ポリシーを持つユーザーまたはロールが AWS リソースへのアクセスをリクエストすると、 はポリシーのデフォルトバージョン AWS をチェックして、リクエストを許可するかどうかを決定します。
JSON ポリシードキュメント
{ "Version" : "2012-10-17", "Statement" : [ { "Sid" : "AllowlistAllVPCsforSGCreation", "Effect" : "Allow", "Action" : "ec2:CreateSecurityGroup", "Resource" : "arn:aws:ec2:*:*:vpc/*" }, { "Sid" : "CreateServiceEndpointResources", "Effect" : "Allow", "Action" : [ "ec2:CreateSecurityGroup", "ec2:CreateVpcEndpointServiceConfiguration" ], "Resource" : [ "arn:aws:ec2:*:*:security-group/*", "arn:aws:ec2:*:*:vpc-endpoint-service/*" ], "Condition" : { "Null" : { "aws:RequestTag/file_system_id" : "false", "aws:RequestTag/AWSApplicationMigrationServiceManaged" : "false" } } }, { "Sid" : "EC2AllowOperationsOnTaggedResources", "Effect" : "Allow", "Action" : [ "ec2:AuthorizeSecurityGroupIngress", "ec2:DeleteSecurityGroup", "ec2:DeleteVpcEndpointServiceConfigurations" ], "Resource" : [ "arn:aws:ec2:*:*:security-group/*", "arn:aws:ec2:*:*:vpc-endpoint-service/*" ], "Condition" : { "Null" : { "aws:ResourceTag/file_system_id" : "false", "aws:ResourceTag/AWSApplicationMigrationServiceManaged" : "false" } } }, { "Sid" : "DescribeOperations", "Effect" : "Allow", "Action" : [ "ec2:DescribeSecurityGroups", "ec2:DescribeVpcEndpoints", "ec2:DescribeVpcs", "ec2:DescribeSubnets", "ec2:DescribeAccountAttributes", "ec2:DescribeAvailabilityZones", "ec2:DescribeVpcEndpointServiceConfigurations", "ec2:DescribeVpcEndpointConnections", "ec2:GetSecurityGroupsForVpc", "fsx:DescribeFileSystems", "fsx:DescribeStorageVirtualMachines", "elasticloadbalancing:DescribeLoadBalancers", "elasticloadbalancing:DescribeTargetGroups", "ec2:DescribeInternetGateways", "elasticloadbalancing:DescribeTags" ], "Resource" : "*" }, { "Sid" : "ModifyVpcEndpointOperations", "Effect" : "Allow", "Action" : [ "ec2:ModifyVpcEndpointServicePermissions", "ec2:AcceptVpcEndpointConnections" ], "Resource" : "arn:aws:ec2:*:*:vpc-endpoint-service/*", "Condition" : { "Null" : { "aws:ResourceTag/file_system_id" : "false", "aws:ResourceTag/AWSApplicationMigrationServiceManaged" : "false" } } }, { "Sid" : "EC2AllowTaggingOnCreate", "Effect" : "Allow", "Action" : "ec2:CreateTags", "Resource" : [ "arn:aws:ec2:*:*:security-group/*", "arn:aws:ec2:*:*:vpc-endpoint-service/*" ], "Condition" : { "StringEquals" : { "ec2:CreateAction" : [ "CreateSecurityGroup", "CreateVpcEndpointServiceConfiguration" ] } } }, { "Sid" : "CreateFSxNLB", "Effect" : "Allow", "Action" : [ "elasticloadbalancing:CreateLoadBalancer", "elasticloadbalancing:CreateTargetGroup", "elasticloadbalancing:CreateListener" ], "Resource" : [ "arn:aws:elasticloadbalancing:*:*:loadbalancer/net/MgnFSxProxy*NLB/*", "arn:aws:elasticloadbalancing:*:*:targetgroup/MgnFSxProxy*/*" ], "Condition" : { "Null" : { "aws:RequestTag/file_system_id" : "false", "aws:RequestTag/AWSApplicationMigrationServiceManaged" : "false" } } }, { "Sid" : "FSxNLBAllowTaggingOnCreate", "Effect" : "Allow", "Action" : "elasticloadbalancing:AddTags", "Resource" : [ "arn:aws:elasticloadbalancing:*:*:loadbalancer/net/MgnFSxProxy*NLB/*", "arn:aws:elasticloadbalancing:*:*:targetgroup/MgnFSxProxy*TG/*", "arn:aws:elasticloadbalancing:*:*:listener/net/MgnFSxProxy*/*/*" ], "Condition" : { "StringEquals" : { "elasticloadbalancing:CreateAction" : [ "CreateLoadBalancer", "CreateTargetGroup", "CreateListener" ] } } }, { "Sid" : "FSxNLBRole", "Effect" : "Allow", "Action" : "iam:CreateServiceLinkedRole", "Resource" : "arn:aws:iam::*:role/aws-service-role/elasticloadbalancing.amazonaws.com/AWSServiceRoleForElasticLoadBalancing", "Condition" : { "StringEquals" : { "iam:AWSServiceName" : "elasticloadbalancing.amazonaws.com" } } }, { "Sid" : "RegisterFSxTargetGroup", "Effect" : "Allow", "Action" : "elasticloadbalancing:RegisterTargets", "Resource" : "arn:aws:elasticloadbalancing:*:*:targetgroup/MgnFSxProxy*/*" }, { "Sid" : "ELBv2AllowModify", "Effect" : "Allow", "Action" : "elasticloadbalancing:ModifyLoadBalancerAttributes", "Resource" : "arn:aws:elasticloadbalancing:*:*:loadbalancer/net/MgnFSxProxy*/*" }, { "Sid" : "ELBv2AllowOperationsOnTaggedResources", "Effect" : "Allow", "Action" : [ "elasticloadbalancing:DeleteLoadBalancer", "elasticloadbalancing:DeleteTargetGroup" ], "Resource" : [ "arn:aws:elasticloadbalancing:*:*:loadbalancer/net/MgnFSxProxy*/*", "arn:aws:elasticloadbalancing:*:*:listener/net/MgnFSxProxy*/*/*", "arn:aws:elasticloadbalancing:*:*:targetgroup/MgnFSxProxy*/*" ], "Condition" : { "Null" : { "aws:ResourceTag/file_system_id" : "false", "aws:ResourceTag/AWSApplicationMigrationServiceManaged" : "false" } } } ] }