기계 번역으로 제공되는 번역입니다. 제공된 번역과 원본 영어의 내용이 상충하는 경우에는 영어 버전이 우선합니다.
AWSApplicationMigrationFSxProxyVPCPolicy
설명: AWS Application Migration Service와 고객의 FSx 파일 시스템 간에 PrivateLink를 관리할 수 있는 권한을 제공합니다.
AWSApplicationMigrationFSxProxyVPCPolicy은(는) AWS 관리형 정책입니다.
이 정책 사용
사용자, 그룹 및 역할에 AWSApplicationMigrationFSxProxyVPCPolicy를 연결할 수 있습니다.
정책 세부 정보
-
유형: 서비스 역할 정책
-
생성 시간: 2026년 5월 31일, 13:27 UTC
-
편집된 시간: 2026년 5월 31일, 13:27 UTC
-
ARN:
arn:aws:iam::aws:policy/service-role/AWSApplicationMigrationFSxProxyVPCPolicy
정책 버전
정책 버전: v1(기본값)
정책의 기본 버전은 정책에 대한 권한을 정의하는 버전입니다. 정책이 있는 사용자 또는 역할이 AWS 리소스에 대한 액세스를 요청하면는 정책의 기본 버전을 AWS 확인하여 요청을 허용할지 여부를 결정합니다.
JSON 정책 문서
{ "Version" : "2012-10-17", "Statement" : [ { "Sid" : "AllowlistAllVPCsforSGCreation", "Effect" : "Allow", "Action" : "ec2:CreateSecurityGroup", "Resource" : "arn:aws:ec2:*:*:vpc/*" }, { "Sid" : "CreateServiceEndpointResources", "Effect" : "Allow", "Action" : [ "ec2:CreateSecurityGroup", "ec2:CreateVpcEndpointServiceConfiguration" ], "Resource" : [ "arn:aws:ec2:*:*:security-group/*", "arn:aws:ec2:*:*:vpc-endpoint-service/*" ], "Condition" : { "Null" : { "aws:RequestTag/file_system_id" : "false", "aws:RequestTag/AWSApplicationMigrationServiceManaged" : "false" } } }, { "Sid" : "EC2AllowOperationsOnTaggedResources", "Effect" : "Allow", "Action" : [ "ec2:AuthorizeSecurityGroupIngress", "ec2:DeleteSecurityGroup", "ec2:DeleteVpcEndpointServiceConfigurations" ], "Resource" : [ "arn:aws:ec2:*:*:security-group/*", "arn:aws:ec2:*:*:vpc-endpoint-service/*" ], "Condition" : { "Null" : { "aws:ResourceTag/file_system_id" : "false", "aws:ResourceTag/AWSApplicationMigrationServiceManaged" : "false" } } }, { "Sid" : "DescribeOperations", "Effect" : "Allow", "Action" : [ "ec2:DescribeSecurityGroups", "ec2:DescribeVpcEndpoints", "ec2:DescribeVpcs", "ec2:DescribeSubnets", "ec2:DescribeAccountAttributes", "ec2:DescribeAvailabilityZones", "ec2:DescribeVpcEndpointServiceConfigurations", "ec2:DescribeVpcEndpointConnections", "ec2:GetSecurityGroupsForVpc", "fsx:DescribeFileSystems", "fsx:DescribeStorageVirtualMachines", "elasticloadbalancing:DescribeLoadBalancers", "elasticloadbalancing:DescribeTargetGroups", "ec2:DescribeInternetGateways", "elasticloadbalancing:DescribeTags" ], "Resource" : "*" }, { "Sid" : "ModifyVpcEndpointOperations", "Effect" : "Allow", "Action" : [ "ec2:ModifyVpcEndpointServicePermissions", "ec2:AcceptVpcEndpointConnections" ], "Resource" : "arn:aws:ec2:*:*:vpc-endpoint-service/*", "Condition" : { "Null" : { "aws:ResourceTag/file_system_id" : "false", "aws:ResourceTag/AWSApplicationMigrationServiceManaged" : "false" } } }, { "Sid" : "EC2AllowTaggingOnCreate", "Effect" : "Allow", "Action" : "ec2:CreateTags", "Resource" : [ "arn:aws:ec2:*:*:security-group/*", "arn:aws:ec2:*:*:vpc-endpoint-service/*" ], "Condition" : { "StringEquals" : { "ec2:CreateAction" : [ "CreateSecurityGroup", "CreateVpcEndpointServiceConfiguration" ] } } }, { "Sid" : "CreateFSxNLB", "Effect" : "Allow", "Action" : [ "elasticloadbalancing:CreateLoadBalancer", "elasticloadbalancing:CreateTargetGroup", "elasticloadbalancing:CreateListener" ], "Resource" : [ "arn:aws:elasticloadbalancing:*:*:loadbalancer/net/MgnFSxProxy*NLB/*", "arn:aws:elasticloadbalancing:*:*:targetgroup/MgnFSxProxy*/*" ], "Condition" : { "Null" : { "aws:RequestTag/file_system_id" : "false", "aws:RequestTag/AWSApplicationMigrationServiceManaged" : "false" } } }, { "Sid" : "FSxNLBAllowTaggingOnCreate", "Effect" : "Allow", "Action" : "elasticloadbalancing:AddTags", "Resource" : [ "arn:aws:elasticloadbalancing:*:*:loadbalancer/net/MgnFSxProxy*NLB/*", "arn:aws:elasticloadbalancing:*:*:targetgroup/MgnFSxProxy*TG/*", "arn:aws:elasticloadbalancing:*:*:listener/net/MgnFSxProxy*/*/*" ], "Condition" : { "StringEquals" : { "elasticloadbalancing:CreateAction" : [ "CreateLoadBalancer", "CreateTargetGroup", "CreateListener" ] } } }, { "Sid" : "FSxNLBRole", "Effect" : "Allow", "Action" : "iam:CreateServiceLinkedRole", "Resource" : "arn:aws:iam::*:role/aws-service-role/elasticloadbalancing.amazonaws.com/AWSServiceRoleForElasticLoadBalancing", "Condition" : { "StringEquals" : { "iam:AWSServiceName" : "elasticloadbalancing.amazonaws.com" } } }, { "Sid" : "RegisterFSxTargetGroup", "Effect" : "Allow", "Action" : "elasticloadbalancing:RegisterTargets", "Resource" : "arn:aws:elasticloadbalancing:*:*:targetgroup/MgnFSxProxy*/*" }, { "Sid" : "ELBv2AllowModify", "Effect" : "Allow", "Action" : "elasticloadbalancing:ModifyLoadBalancerAttributes", "Resource" : "arn:aws:elasticloadbalancing:*:*:loadbalancer/net/MgnFSxProxy*/*" }, { "Sid" : "ELBv2AllowOperationsOnTaggedResources", "Effect" : "Allow", "Action" : [ "elasticloadbalancing:DeleteLoadBalancer", "elasticloadbalancing:DeleteTargetGroup" ], "Resource" : [ "arn:aws:elasticloadbalancing:*:*:loadbalancer/net/MgnFSxProxy*/*", "arn:aws:elasticloadbalancing:*:*:listener/net/MgnFSxProxy*/*/*", "arn:aws:elasticloadbalancing:*:*:targetgroup/MgnFSxProxy*/*" ], "Condition" : { "Null" : { "aws:ResourceTag/file_system_id" : "false", "aws:ResourceTag/AWSApplicationMigrationServiceManaged" : "false" } } } ] }