AWS AWSEC2 documentation change
Summary
Added PowerShell examples, restructured CLI commands, and clarified TpmSupport field visibility in console
Security assessment
Improves documentation for verifying NitroTPM (a hardware-based security feature) on instances but does not indicate resolution of a security flaw. Enhances security feature awareness.
Diff
diff --git a/AWSEC2/latest/UserGuide/verify-nitrotpm-support-on-instance.md b/AWSEC2/latest/UserGuide/verify-nitrotpm-support-on-instance.md index 1788e9103..71c88742d 100644 --- a//AWSEC2/latest/UserGuide/verify-nitrotpm-support-on-instance.md +++ b//AWSEC2/latest/UserGuide/verify-nitrotpm-support-on-instance.md @@ -4,0 +5,2 @@ +Verify NitroTPM access on your Windows instance + @@ -7 +9,6 @@ -You can use one of the following methods to verify whether an Amazon EC2 instance is enabled for NitroTPM. +You can verify whether an Amazon EC2 instance is enabled for NitroTPM. + +The Amazon EC2 console does not display the `TpmSupport` field. + +AWS CLI + @@ -11 +18,13 @@ You can use one of the following methods to verify whether an Amazon EC2 instanc -Use the [describe-instances](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/describe-instances.html) command and specify the instance ID. The Amazon EC2 console does not display the `TpmSupport` field. +Use the [describe-instances](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/describe-instances.html) command and specify the instance ID. + + + aws ec2 describe-instances \ + --instance-ids i-1234567890abcdef0 \ + --query Reservations[].Instances[].TpmSupport + +If NitroTPM support is enabled on the instance, the command returns `"v2.0"`. Otherwise, the `TpmSupport` field is not present in the output. + +PowerShell + + +###### To verify whether an instance is enabled for NitroTPM @@ -12,0 +32 @@ Use the [describe-instances](https://awscli.amazonaws.com/v2/documentation/api/l +Use the [Get-EC2Instance](https://docs.aws.amazon.com/powershell/latest/reference/items/Get-EC2Instance.html) cmdlet. @@ -14 +33,0 @@ Use the [describe-instances](https://awscli.amazonaws.com/v2/documentation/api/l - aws ec2 describe-instances --instance-ids i-1234567890abcdef0 @@ -16 +35,2 @@ Use the [describe-instances](https://awscli.amazonaws.com/v2/documentation/api/l -If NitroTPM support is enabled on the instance, `"TpmSupport": "v2.0"` appears in the output. For example: + (Get-EC2Instance ` + -InstanceId i-1234567890abcdef0).Instances.TpmSupport @@ -17,0 +38 @@ If NitroTPM support is enabled on the instance, `"TpmSupport": "v2.0"` appears i +If NitroTPM support is enabled on the instance, the command returns `"v2.0"`. Otherwise, the `TpmSupport` field is not present in the output. @@ -19,8 +40 @@ If NitroTPM support is enabled on the instance, `"TpmSupport": "v2.0"` appears i - "Instances": { - "InstanceId":"0123456789example", - "InstanceType":"c5.large", - ... - "BootMode": "uefi", - **"TpmSupport": "v2.0"** - ... - } +## Verify NitroTPM access on your Windows instance