AWS managedservices documentation change

Service: managedservices · 2025-04-25 · Documentation medium

File: managedservices/latest/ctref/management-advanced-ec2-instance-stack-encrypt-instance-volumes.md

Summary

Added 'CopyTagsToNewEncryptedVolumes' parameter, updated title, and added encryption best practices link

Security assessment

Enhances encryption documentation by adding tag propagation control and linking to security guidance. Improves security posture documentation but no vulnerability fix indicated.

Diff

diff --git a/managedservices/latest/ctref/management-advanced-ec2-instance-stack-encrypt-instance-volumes.md b/managedservices/latest/ctref/management-advanced-ec2-instance-stack-encrypt-instance-volumes.md
index dd2fce370..95744613a 100644
--- a//managedservices/latest/ctref/management-advanced-ec2-instance-stack-encrypt-instance-volumes.md
+++ b//managedservices/latest/ctref/management-advanced-ec2-instance-stack-encrypt-instance-volumes.md
@@ -25 +25 @@ Execution mode | Automated
-### Encrypt instance
+### Encrypt Amazon EC2 instance volumes
@@ -29 +29 @@ The following shows this change type in the AMS console.
-![Encrypt Instance Volumes interface showing ID, execution mode, version, and description details.](/images/managedservices/latest/ctref/images/guiEc2EncryptVolumesCT.png)
+![AMS Advanced console, create RFC section, change type details box for ct-0hahohe17csnc: Encrypt Amazon EC2 instance volumes.](/images/managedservices/latest/ctref/images/guiEc2EncryptVolumesCT.png)
@@ -79 +79 @@ Issue the create RFC command with execution parameters provided inline (escape q
-    aws amscm create-rfc --change-type-id "ct-0hahohe17csnc" --change-type-version "1.0" --title "AWSManagedServices-EncryptInstanceVolumes" --execution-parameters "{\"DocumentName\": \"AWSManagedServices-EncryptInstanceVolumes\",\"Region\": \"us-east-1\",\"Parameters\": {\"InstanceId\": [\"i-0a458848bc91a1b7b\"], \"VolumeIds\": [\"vol-02f576d0e8c5c51e8\", \"vol-0090e02379b9880d9\"], \"KMSKeyId\": [\"7103a217-2489-481e-976c-0375efc5f606\"], \"DeleteStaleNonEncryptedSnapshotBackups\": [\"False\"]}}"
+    aws amscm create-rfc --change-type-id "ct-0hahohe17csnc" --change-type-version "1.0" --title "AWSManagedServices-EncryptInstanceVolumes" --execution-parameters "{\"DocumentName\": \"AWSManagedServices-EncryptInstanceVolumes\",\"Region\": \"us-east-1\",\"Parameters\": {\"InstanceId\": [\"i-0a458848bc91a1b7b\"], \"VolumeIds\": [\"vol-02f576d0e8c5c51e8\", \"vol-0090e02379b9880d9\"], \"KMSKeyId\": [\"7103a217-2489-481e-976c-0375efc5f606\"], \"DeleteStaleNonEncryptedSnapshotBackups\": [\"False\"], \"CopyTagsToNewEncryptedVolumes\": [\"False\"]}}"
@@ -94,2 +94 @@ _TEMPLATE CREATE_ :
-          "i-0a458848bc91a1b7b"
-        ],
+          "i-0a458848bc91a1b7b"],
@@ -98,2 +97 @@ _TEMPLATE CREATE_ :
-          "vol-0090e02379b9880d9"
-        ],
+          "vol-0090e02379b9880d9"],
@@ -101,2 +99 @@ _TEMPLATE CREATE_ :
-          "7103a217-2489-481e-976c-0375efc5f606"
-        ],
+          "7103a217-2489-481e-976c-0375efc5f606"],
@@ -104,2 +101,2 @@ _TEMPLATE CREATE_ :
-          "False"
-        ]
+          "False"],
+        "CopyTagsToNewEncryptedVolumes": ["True"]
@@ -130 +127,6 @@ You receive the ID of the new RFC in the response and can use it to submit and m
-For more information about Amazon EC2, including size recommendations, see [Amazon Elastic Compute Cloud Documentation](https://aws.amazon.com/documentation/ec2/).
+  * For more information about encrypting Amazon EC2 instance volumes, see [Encryption best practices for Amazon EC2and Amazon EBS](https://docs.aws.amazon.com/prescriptive-guidance/latest/encryption-best-practices/ec2-ebs.html)
+
+  * For more information about Amazon EC2, including size recommendations, see [Amazon Elastic Compute Cloud Documentation](https://aws.amazon.com/documentation/ec2/).
+
+
+