AWS AWSEC2 documentation change
Summary
Updated documentation about IAM roles in instance profiles, clarifying that a role can be included in multiple instance profiles and adding guidance about updating permissions
Security assessment
The changes provide general operational guidance about managing IAM roles in instance profiles but do not address any specific security vulnerabilities or introduce new security features
Diff
diff --git a/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.md index 4c889e5a0..f3eb61e00 100644 --- a/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.md +++ b/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.md @@ -61 +61,3 @@ If you use the AWS CLI, API, or an AWS SDK to create a role, you create the role -An instance profile can contain only one IAM role. This limit cannot be increased. +An instance profile can contain only one IAM role. You can include an IAM role in multiple instance profiles. + +To update permissions for an instance, replace its instance profile. We do not recommend removing a role from an instance profile, because there is a delay of up to one hour before this change takes effect.