AWS Security ChangesHomeSearch

AWS AWSEC2 documentation change

Service: AWSEC2 · 2025-02-26 · Documentation low

File: AWSEC2/latest/UserGuide/CopyingAMIs.md

Summary

Added documentation for time-based AMI copies including quotas, pricing, and console steps

Security assessment

Changes introduce operational features (time-bound copies) rather than security features. Existing encryption documentation remains unchanged; new content focuses on performance characteristics.

Diff

diff --git a/AWSEC2/latest/UserGuide/CopyingAMIs.md
index b4c3d6259..78ce408ad 100644
--- a/AWSEC2/latest/UserGuide/CopyingAMIs.md
+++ b/AWSEC2/latest/UserGuide/CopyingAMIs.md
@@ -9 +9,3 @@ ConsiderationsCostsCopy an AMIStop a pending AMI copy operation
-You can create a copy an Amazon Machine Image (AMI) within the same Region or across Regions in the same partition. To copy an AMI to another partition, see [Store and restore an AMI](./ami-store-restore.html).
+You can create a copy an Amazon Machine Image (AMI) within the same Region or across Regions in the same partition. If you need your AMI copies to complete within a specific timeframe, you can optionally initiate time-based AMI copy operations. With time-based AMI copy operations, you specificy a completion duration, between 15 minutes and 48 hours, in which the copy operation is to be completed. For more information, see [Time-based copies](https://docs.aws.amazon.com/ebs/latest/userguide/time-based-copies.html) in the _Amazon EBS User Guide_.
+
+To copy an AMI to another partition, see [Store and restore an AMI](./ami-store-restore.html).
@@ -29,0 +38,2 @@ You can create a copy an Amazon Machine Image (AMI) within the same Region or ac
+  * **Quotas for time-based AMI copies** – Once you reach your _cumulative snapshot copy throughput quota_ , subsequent time-based AMI copy requests fail. For more information, see [ Quotas for time-based copies](https://docs.aws.amazon.com/ebs/latest/userguide/time-based-copies.html#time-based-copies-quota) in the _Amazon EBS User Guide_.
+
@@ -36,0 +47,2 @@ There are no charges for copying an AMI. However, standard storage and data tran
+Additional charges apply for time-based AMI copy operations. For more information, see [ Time-based copies](https://docs.aws.amazon.com/ebs/latest/userguide/time-based-copies.html#time-based-copies-pricing) in the _Amazon EBS User Guide_.
+
@@ -64 +76,5 @@ Console
-    4. **Copy tags** : Select this checkbox to include your user-defined AMI tags when copying the AMI. System tags (prefixed with `aws:`) and user-defined tags that are attached by other AWS accounts will not be copied.
+    4. If you need the copy to be completed within a specific timeframe, select **Enable time-based copy**. For **Completion duration** , enter the required completion duration, in 15-minute increments. The completion duration applies to all snapshots associated with the AMI. For more information, see [ Time-based copies](https://docs.aws.amazon.com/ebs/latest/userguide/time-based-copies.html) in the _Amazon EBS User Guide_.
+
+If you do not need the AMI copy to be completed in a specific timeframe, do not enable time-based copy. In this case, the snapshot copy is completed on a best-effort basis.
+
+    5. **Copy tags** : Select this checkbox to include your user-defined AMI tags when copying the AMI. System tags (prefixed with `aws:`) and user-defined tags that are attached by other AWS accounts will not be copied.
@@ -66 +82 @@ Console
-    5. (EBS-backed AMIs only) **Encrypt EBS snapshots of AMI copy** : Select this checkbox to encrypt the target snapshots, or to re-encrypt them using a different key. If encryption by default is enabled, the **Encrypt EBS snapshots of AMI copy** checkbox is selected and cannot be cleared. For more information, see [Encryption and copying](./how-ami-copy-works.html#ami-copy-encryption).
+    6. (EBS-backed AMIs only) **Encrypt EBS snapshots of AMI copy** : Select this checkbox to encrypt the target snapshots, or to re-encrypt them using a different key. If encryption by default is enabled, the **Encrypt EBS snapshots of AMI copy** checkbox is selected and cannot be cleared. For more information, see [Encryption and copying](./how-ami-copy-works.html#ami-copy-encryption).
@@ -68 +84 @@ Console
-    6. (EBS-backed AMIs only) **KMS key** : The KMS key to used to encrypt the target snapshots.
+    7. (EBS-backed AMIs only) **KMS key** : The KMS key to used to encrypt the target snapshots.
@@ -70 +86 @@ Console
-    7. **Tags** : You can tag the new AMI and the new snapshots with the same tags, or you can tag them with different tags.
+    8. **Tags** : You can tag the new AMI and the new snapshots with the same tags, or you can tag them with different tags.
@@ -78 +94 @@ To add a tag, choose **Add tag** , and enter the key and value for the tag. Repe
-    8. When you're ready to copy the AMI, choose **Copy AMI**.
+    9. When you're ready to copy the AMI, choose **Copy AMI**.