AWS managedservices documentation change
Summary
Added failure note for EBS encryption CT execution and introduced 'CopyTagsToNewEncryptedVolumes' parameter with default value
Security assessment
The change enhances documentation for encryption processes and tag management during volume encryption, which are security-related features. However, there's no evidence of addressing a specific vulnerability.
Diff
diff --git a/managedservices/latest/ctref/schemas.md b/managedservices/latest/ctref/schemas.md index 1f0a6fe99..ad376863b 100644 --- a//managedservices/latest/ctref/schemas.md +++ b//managedservices/latest/ctref/schemas.md @@ -5400 +5400 @@ Change type schemas specify the execution input parameters for a change type. - "description": "Encrypt Elastic Block Store (EBS) volumes attached to an EC2 instance", + "description" : "Encrypt Elastic Block Store (EBS) volumes attached to an EC2 instance. Note: If the CT execution fails, verify that the EC2 instance related to this execution is healthy.", @@ -5455,4 +5455,12 @@ Change type schemas specify the execution input parameters for a change type. - "enum": [ - "True", - "False" - ], + "enum": ["True","False"], + "default": "True" + }, + "minItems": 1, + "maxItems": 1 + }, + "CopyTagsToNewEncryptedVolumes": { + "description": "(Optional) True to copy tags from old volumes to new encrypted volumes, false to not copy tags. Default is true.", + "type": "array", + "items": { + "type": "string", + "enum": ["True","False"], @@ -5470 +5478,2 @@ Change type schemas specify the execution input parameters for a change type. - "DeleteStaleNonEncryptedSnapshotBackups" + "DeleteStaleNonEncryptedSnapshotBackups", + "CopyTagsToNewEncryptedVolumes"