AWS Security ChangesHomeSearch

AWS AWSEC2 documentation change

Service: AWSEC2 · 2025-04-11 · Documentation low

File: AWSEC2/latest/UserGuide/sriov-networking.md

Summary

Restructured documentation for checking sriovNetSupport attribute with expanded CLI examples for both instances and images

Security assessment

Improves technical documentation for verifying network configuration but does not address security vulnerabilities or add security features

Diff

diff --git a/AWSEC2/latest/UserGuide/sriov-networking.md b/AWSEC2/latest/UserGuide/sriov-networking.md
index b1c8647dc..35cbf9a08 100644
--- a//AWSEC2/latest/UserGuide/sriov-networking.md
+++ b//AWSEC2/latest/UserGuide/sriov-networking.md
@@ -93 +93 @@ Enhanced networking is supported only for HVM instances. Enabling enhanced netwo
-Verify that the `sriovNetSupport` attribute is set.
+Verify that the `sriovNetSupport` attribute is set on the instance or the image.
@@ -95 +95 @@ Verify that the `sriovNetSupport` attribute is set.
-###### Instance attribute (sriovNetSupport)
+AWS CLI
@@ -97 +96,0 @@ Verify that the `sriovNetSupport` attribute is set.
-To check whether an instance has the enhanced networking `sriovNetSupport` attribute set, use one of the following commands. If the attribute is set, the value is `simple`.
@@ -99 +98 @@ To check whether an instance has the enhanced networking `sriovNetSupport` attri
-  * [describe-instance-attribute](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/describe-instance-attribute.html) (AWS CLI)
+###### To check the instance attribute (sriovNetSupport)
@@ -101 +100 @@ To check whether an instance has the enhanced networking `sriovNetSupport` attri
-        aws ec2 describe-instance-attribute --instance-id instance_id --attribute sriovNetSupport
+Use the following [describe-instance-attribute](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/describe-instance-attribute.html) command. If the attribute is set, the value is `simple`.
@@ -103 +101,0 @@ To check whether an instance has the enhanced networking `sriovNetSupport` attri
-  * [Get-EC2InstanceAttribute](https://docs.aws.amazon.com/powershell/latest/reference/items/Get-EC2InstanceAttribute.html) (AWS Tools for Windows PowerShell)
@@ -105 +103,3 @@ To check whether an instance has the enhanced networking `sriovNetSupport` attri
-        Get-EC2InstanceAttribute -InstanceId instance-id -Attribute sriovNetSupport
+    aws ec2 describe-instance-attribute \
+        --instance-id i-1234567890abcdef0 \
+        --attribute sriovNetSupport
@@ -106,0 +107 @@ To check whether an instance has the enhanced networking `sriovNetSupport` attri
+###### To check the image attribute (sriovNetSupport)
@@ -107,0 +109 @@ To check whether an instance has the enhanced networking `sriovNetSupport` attri
+Use the following [describe-images](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/describe-images.html) command. If the attribute is set, the value is `simple`.
@@ -110 +112,3 @@ To check whether an instance has the enhanced networking `sriovNetSupport` attri
-###### Image attribute (sriovNetSupport)
+    aws ec2 describe-images \
+        --image-id ami-0abcdef1234567890 \
+        --query "Images[].SriovNetSupport"
@@ -112 +116 @@ To check whether an instance has the enhanced networking `sriovNetSupport` attri
-To check whether an AMI already has the enhanced networking `sriovNetSupport` attribute set, use one of the following commands. If the attribute is set, the value is `simple`.
+PowerShell
@@ -114 +117,0 @@ To check whether an AMI already has the enhanced networking `sriovNetSupport` at
-  * [describe-images](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/describe-images.html) (AWS CLI)
@@ -116 +119 @@ To check whether an AMI already has the enhanced networking `sriovNetSupport` at
-        aws ec2 describe-images --image-id ami_id --query "Images[].SriovNetSupport"
+###### To check the instance attribute (sriovNetSupport)
@@ -118 +121 @@ To check whether an AMI already has the enhanced networking `sriovNetSupport` at
-  * [Get-EC2Image](https://docs.aws.amazon.com/powershell/latest/reference/items/Get-EC2Image.html) (AWS Tools for Windows PowerShell)
+Use the following [Get-EC2InstanceAttribute](https://docs.aws.amazon.com/powershell/latest/reference/items/Get-EC2InstanceAttribute.html) cmdlet. If the attribute is set, the value is `simple`.
@@ -120 +122,0 @@ To check whether an AMI already has the enhanced networking `sriovNetSupport` at
-        (Get-EC2Image -ImageId ami-id).SriovNetSupport
@@ -121,0 +124,3 @@ To check whether an AMI already has the enhanced networking `sriovNetSupport` at
+    Get-EC2InstanceAttribute `
+        -InstanceId i-1234567890abcdef0 `
+        -Attribute sriovNetSupport
@@ -122,0 +128 @@ To check whether an AMI already has the enhanced networking `sriovNetSupport` at
+###### To check the image attribute (sriovNetSupport)
@@ -123,0 +130,4 @@ To check whether an AMI already has the enhanced networking `sriovNetSupport` at
+Use the following [describe-images](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/describe-images.html) command. If the attribute is set, the value is `simple`.
+    
+    
+    (Get-EC2Image -ImageId ami-0abcdef1234567890).SriovNetSupport