AWS linux documentation change
Summary
Updated documentation links and anchor references related to UEFI Secure Boot requirements and processes. Changed section titles in cross-references to be more descriptive and corrected URL paths.
Security assessment
Changes involve documentation improvements for clarity and accuracy of cross-references, but do not address any specific security vulnerability or add new security features. The updates refine existing security-related documentation about UEFI Secure Boot without introducing new security content.
Diff
diff --git a/linux/al2023/ug/uefi-secure-boot.md b/linux/al2023/ug/uefi-secure-boot.md index 6ee02648d..97233615d 100644 --- a//linux/al2023/ug/uefi-secure-boot.md +++ b//linux/al2023/ug/uefi-secure-boot.md @@ -9 +9 @@ Enable UEFI Secure Boot on AL2023Enrollment of an existing instanceRegister imag -AL2023 supports UEFI Secure Boot starting with release 2023.1. You must use AL2023 with Amazon EC2 instances that support both UEFI and UEFI Secure Boot. For more information, see [Launch an instance](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/launch-instance-boot-mode.html) in the _Amazon EC2 User Guide_. +AL2023 supports UEFI Secure Boot starting with release 2023.1. You must use AL2023 with Amazon EC2 instances that support both UEFI and UEFI Secure Boot. For more information, see [Requirements to launch an Amazon EC2 instance in UEFI boot mode](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/launch-instance-boot-mode.html) in the _Amazon EC2 User Guide_. @@ -13 +13 @@ AL2023 instances with UEFI Secure Boot enabled accept only kernel level code, in -For more information about Amazon EC2 instances and UEFI Secure Boot, see [UEFI Secure Boot](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/uefi-secure-boot.html) in the _Amazon EC2 User Guide_. +For more information about Amazon EC2 instances and UEFI Secure Boot, see [UEFI Secure Boot for Amazon Amazon EC2 instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/uefi-secure-boot.html) in the _Amazon EC2 User Guide_. @@ -19 +19 @@ For more information about Amazon EC2 instances and UEFI Secure Boot, see [UEFI - * The instance type must support UEFI Secure Boot. For more information, see [Launch an instance](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/launch-instance-boot-mode.html) in the _Amazon EC2 User Guide_. + * The instance type must support UEFI Secure Boot. For more information, see [Requirements to launch an Amazon EC2 instance in UEFI boot mode](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/launch-instance-boot-mode.html) in the _Amazon EC2 User Guide_. @@ -30 +30 @@ The boot mode of AL2023 AMIs is set to `uefi-preferred` which ensures that insta -For more information about AMI boot modes on Amazon EC2 instances, see [Boot modes](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ami-boot.html) in the _Amazon EC2 User Guide_. +For more information about AMI boot modes on Amazon EC2 instances, see [Instance launch behavior with Amazon Amazon EC2 boot modes](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ami-boot.html) in the _Amazon EC2 User Guide_. @@ -70 +70 @@ When registering an AMI from a snapshot of an Amazon EBS root volume using the A -For more information about creating and using a binary blob, see [Option B: Create a binary blob containing a pre-filled variable store](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/uefi-secure-boot-optionB.html) in the _Amazon EC2 User Guide_. +For more information about creating and using a binary blob, see [Create a binary blob containing a pre-filled variable store](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/create-ami-with-uefi-secure-boot.html#uefi-secure-boot-optionB) in the _Amazon EC2 User Guide_. @@ -80 +80 @@ When registering an image, we recommend using the `BootMode` parameter of the [` -For more information about NitroTPM, see [NitroTPM](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html) in the _Amazon EC2 User Guide_. +For more information about NitroTPM, see [NitroTPM for Amazon Amazon EC2 instances ](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/nitrotpm.html) in the _Amazon EC2 User Guide_. @@ -96 +96 @@ With Amazon Linux, UEFI directly loads and verifies our `grub2` bootloader. The -For more information about UEFI Secure Boot, see [How UEFI Secure Boot works](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/how-uefi-secure-boot-works.html) in the _Amazon EC2 User Guide_. +For more information about UEFI Secure Boot, see [How UEFI Secure Boot works with Amazon Amazon EC2 instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/how-uefi-secure-boot-works.html) in the _Amazon EC2 User Guide_. @@ -102 +102 @@ As documented in the previous section, Amazon Linux does not require a `shim` fo -If you want to enroll your own keys, you can do so either manipulate the variable store within an existing instance (see [ Add keys to the variable store from within the instance](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/uefi-secure-boot-optionA.html)) or construct a binary blob that's prefilled (see [ Create a binary blob containing a pre-filled variable store](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/uefi-secure-boot-optionB.html)). +If you want to enroll your own keys, you can do so either by manipulating the variable store within an existing instance (see [ Add keys to the variable store from within the instance](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/create-ami-with-uefi-secure-boot.html#uefi-secure-boot-optionA)) or by constructing a binary blob that's prefilled (see [ Create a binary blob containing a pre-filled variable store](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/create-ami-with-uefi-secure-boot.html#uefi-secure-boot-optionB)).