AWS AWSEC2 high security documentation change
Summary
Added security warning about 0.0.0.0/0 CIDR usage in security groups, updated termination action terminology from 'Terminate instance' to 'Terminate (delete) instance', and added link to EC2 instance launch tutorials
Security assessment
The change explicitly warns about the security risks of using 0.0.0.0/0 CIDR for SSH/RDP access, which directly addresses a common security misconfiguration. This constitutes concrete security documentation improvement.
Diff
diff --git a/AWSEC2/latest/UserGuide/EC2_GetStarted.md b/AWSEC2/latest/UserGuide/EC2_GetStarted.md index 44cbd0f02..c2ce95a09 100644 --- a//AWSEC2/latest/UserGuide/EC2_GetStarted.md +++ b//AWSEC2/latest/UserGuide/EC2_GetStarted.md @@ -77 +77,7 @@ If you choose **Proceed without a key pair (Not recommended)** , you won't be ab - 8. Under **Network settings** , notice that we selected your default VPC, selected the option to use the default subnet in an Availability Zone that we choose for you, and configured a security group with a rule that allows connections to your instance from anywhere. For your first instance, we recommend that you use the default settings. Otherwise, you can update your network settings as follows: + 8. Under **Network settings** , notice that we selected your default VPC, selected the option to use the default subnet in an Availability Zone that we choose for you, and configured a security group with a rule that allows connections to your instance from anywhere (`0.0.0.0.0/0`). + +###### Warning + +If you specify `0.0.0.0/0`, you are enabling traffic from any IP addresses in the world. For the SSH and RDP protocols, you might consider this acceptable for a short time in a test environment, but it's unsafe for production environments. In production, be sure to authorize access only from the appropriate individual IP address or range of addresses. + +For your first instance, we recommend that you use the default settings. Otherwise, you can update your network settings as follows: @@ -211 +217 @@ You'll stop incurring charges for that instance or usage that counts against you - 2. Choose **Instance state** , **Terminate instance**. + 2. Choose **Instance state** , **Terminate (delete) instance**. @@ -213 +219 @@ You'll stop incurring charges for that instance or usage that counts against you - 3. Choose **Terminate** when prompted for confirmation. + 3. Choose **Terminate (delete)** when prompted for confirmation. @@ -223,0 +230,2 @@ After you start your instance, you might want to explore the following next step + * Explore the Amazon EC2 core concepts with the introductory tutorials. For more information, see [Tutorials for launching EC2 instances](./ec2-instance-launch-tutorials.html). +