{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "DRSFailbackPolicy1",
      "Effect": "Allow",
      "Action": [
        "drs:SendClientMetricsForDrs",
        "drs:SendClientLogsForDrs"
      ],
      "Resource": "*"
    },
    {
      "Sid": "DRSFailbackPolicy2",
      "Effect": "Allow",
      "Action": [
        "drs:GetChannelCommandsForDrs",
        "drs:SendChannelCommandResultForDrs"
      ],
      "Resource": "*"
    },
    {
      "Sid": "DRSFailbackPolicy3",
      "Effect": "Allow",
      "Action": [
        "drs:DescribeReplicationServerAssociationsForDrs",
        "drs:DescribeRecoveryInstances"
      ],
      "Resource": "*"
    },
    {
      "Sid": "DRSFailbackPolicy4",
      "Effect": "Allow",
      "Action": [
        "drs:GetFailbackCommandForDrs",
        "drs:UpdateFailbackClientLastSeenForDrs",
        "drs:NotifyAgentAuthenticationForDrs",
        "drs:UpdateAgentReplicationProcessStateForDrs",
        "drs:NotifyAgentReplicationProgressForDrs",
        "drs:NotifyAgentConnectedForDrs",
        "drs:NotifyAgentDisconnectedForDrs",
        "drs:NotifyConsistencyAttainedForDrs",
        "drs:GetFailbackLaunchRequestedForDrs",
        "drs:IssueAgentCertificateForDrs",
        "drs:GetAgentSnapshotCreditsForDrs",
        "drs:SendVolumeStatsForDrs"
      ],
      "Resource": "arn:aws:drs:*:*:recovery-instance/${aws:SourceIdentity}"
    }
  ]
}