AWS prescriptive-guidance documentation change
Summary
Multiple documentation updates including service name consistency, resource reference corrections, console link formatting, and instructional improvements
Security assessment
Changes include minor text corrections (DynamoDB to Lambda table reference), service name standardization, and console link formatting. While the pattern relates to security monitoring of shared AMIs, these specific changes do not introduce new security documentation or address identified vulnerabilities. The 'Lambda table' correction appears to be a documentation error fix rather than a security remediation.
Diff
diff --git a/prescriptive-guidance/latest/patterns/monitor-use-of-a-shared-amazon-machine-image-across-multiple-aws-accounts.md b/prescriptive-guidance/latest/patterns/monitor-use-of-a-shared-amazon-machine-image-across-multiple-aws-accounts.md index 06e4c873d..8bd3074f9 100644 --- a//prescriptive-guidance/latest/patterns/monitor-use-of-a-shared-amazon-machine-image-across-multiple-aws-accounts.md +++ b//prescriptive-guidance/latest/patterns/monitor-use-of-a-shared-amazon-machine-image-across-multiple-aws-accounts.md @@ -85 +85 @@ The diagram shows the following workflow: - 2. When the AMI is shared, an Amazon EventBridge rule in the creator account captures the `ModifyImageAttribute` event and initiates a Lambda function in the creator account. + 2. When the AMI is shared, an EventBridge rule in the creator account captures the `ModifyImageAttribute` event and initiates a Lambda function in the creator account. @@ -95 +95 @@ The diagram shows the following workflow: - 2. The Lambda function assumes an IAM role in the creator account and updates the DynamoDB table in the creator account. In the `Mapping` table, it creates an item that maps the instance ID or launch template ID to its respective AMI ID. + 2. The Lambda function assumes an IAM role in the creator account and updates the Lambda table in the creator account. In the `Mapping` table, it creates an item that maps the instance ID or launch template ID to its respective AMI ID. @@ -127 +127 @@ The diagram shows the following workflow: - * [ HashiCorp Terraform](https://www.terraform.io/docs) is an open-source infrastructure as code (IaC) tool that helps you use code to provision and manage cloud infrastructure and resources. + * [ HashiCorp Terraform](https://www.terraform.io/docs) is an infrastructure as code (IaC) tool that helps you use code to provision and manage cloud infrastructure and resources. @@ -155 +155 @@ Task| Description| Skills required -Create the AWS CLI named profiles.| For the creator account and each consumer account, create an AWS Command Line Interface (AWS CLI) named profile. For instructions, see [Set Up the AWS CLI](https://aws.amazon.com/getting-started/guides/setup-environment/module-three/) in the AWS Getting Started Resources Center.| DevOps engineer +Create the AWS CLI named profiles.| For the creator account and each consumer account, create an AWS Command Line Interface (AWS CLI) named profile. For instructions, see [Set up the AWS CLI](https://aws.amazon.com/getting-started/guides/setup-environment/module-three/) in the AWS Getting Started Resources Center.| DevOps engineer @@ -225,2 +225,2 @@ Validate deployment in the creator account.| - 2. In the navigation bar, confirm that are viewing the target Region. If you're in a different Region, choose the name of the currently displayed Region, and then choose the target Region. - 3. Open the DynamoDB console at [https://console.aws.amazon.com/dynamodb/](https://console.aws.amazon.com/dynamodb/). + 2. In the navigation bar, confirm that are viewing the target AWS Region. If you're in a different Region, choose the name of the currently displayed Region, and then choose the target Region. + 3. Open the [DynamoDB console](https://console.aws.amazon.com/dynamodb/). @@ -229 +229 @@ Validate deployment in the creator account.| - 6. Open the Lambda console at [https://console.aws.amazon.com/lambda](https://console.aws.amazon.com/lambda). + 6. Open the [Lambda console](https://console.aws.amazon.com/lambda). @@ -232 +232 @@ Validate deployment in the creator account.| - 9. Open the IAM console at [https://console.aws.amazon.com/iamv2/](https://console.aws.amazon.com/iamv2/). + 9. Open the [IAM console](https://console.aws.amazon.com/iamv2/). @@ -235 +235 @@ Validate deployment in the creator account.| - 12. Open the EventBridge console at [https://console.aws.amazon.com/events/](https://console.aws.amazon.com/events/). + 12. Open the [EventBridge console](https://console.aws.amazon.com/events/). @@ -238 +238 @@ Validate deployment in the creator account.| - 15. Open the Amazon SES console at [https:/console.aws.amazon.com/ses/](https://console.aws.amazon.com/ses/). + 15. Open the [Amazon SES console](https://console.aws.amazon.com/ses/). @@ -246,2 +246,2 @@ Validate deployment in the consumer account.| - 2. In the navigation bar, confirm that are viewing the target Region. If you're in a different Region, choose the name of the currently displayed Region, and then choose the target Region. - 3. Open the DynamoDB console at [https://console.aws.amazon.com/dynamodb/](https://console.aws.amazon.com/dynamodb/). + 2. In the navigation bar, confirm that are viewing the target AWS Region. If you're in a different Region, choose the name of the currently displayed Region, and then choose the target Region. + 3. Open the [DynamoDB console](https://console.aws.amazon.com/dynamodb/). @@ -250 +250 @@ Validate deployment in the consumer account.| - 6. Open the Lambda console at [https://console.aws.amazon.com/lambda](https://console.aws.amazon.com/lambda). + 6. Open the [Lambda console](https://console.aws.amazon.com/lambda). @@ -253 +253 @@ Validate deployment in the consumer account.| - 9. Open the EventBridge console at [https://console.aws.amazon.com/events/](https://console.aws.amazon.com/events/). + 9. Open the [EventBridge console](https://console.aws.amazon.com/events/). @@ -263 +263 @@ Create an AMI in the creator account.| - 1. In the creator account, create a private AMI. For instructions, see [Create an AMI from an Amazon EC2 Instance](https://docs.aws.amazon.com/toolkit-for-visual-studio/latest/user-guide/tkv-create-ami-from-instance.html). + 1. In the creator account, create a private AMI. For instructions, see [Create an AMI from an Amazon EC2 instance](https://docs.aws.amazon.com/toolkit-for-visual-studio/latest/user-guide/tkv-create-ami-from-instance.html). @@ -267 +267 @@ Create an AMI in the creator account.| -Use the AMI in the consumer account.| In the consumer account, use the shared AMI to create an EC2 instance or launch template. For instructions, see [How do I launch an EC2 instance from a custom AMI](https://repost.aws/knowledge-center/launch-instance-custom-ami) (AWS re:Post Knowledge Center) or How to create launch template (Amazon EC2 Auto Scaling documentation).| DevOps engineer +Use the AMI in the consumer account.| In the consumer account, use the shared AMI to create an Amazon EC2 instance or launch template. For instructions, see [How do I launch an Amazon EC2 instance from a custom AMI](https://repost.aws/knowledge-center/launch-instance-custom-ami) (AWS re:Post Knowledge Center) or [Create a launch template for an Auto Scaling group](https://docs.aws.amazon.com/autoscaling/ec2/userguide/create-launch-template.html) (Amazon EC2 Auto Scaling documentation).| DevOps engineer @@ -271 +271 @@ Validate monitoring and alerting.| - 2. Open the Amazon EC2 console at [https://console.aws.amazon.com/ec2/](https://console.aws.amazon.com/ec2/). + 2. Open the [Amazon EC2 console](https://console.aws.amazon.com/ec2/).