AWS AWSEC2 medium security documentation change
Summary
Added entries for updated EC2 Fast Launch managed policies and simplified onboarding
Security assessment
Documents expanded IAM permissions for EC2 Fast Launch service roles including EventBridge rules creation and CloudFormation stack management. While enhancing functionality, these changes directly relate to access control policies which have security implications if misconfigured.
Diff
diff --git a/AWSEC2/latest/UserGuide/DocumentHistory.md b/AWSEC2/latest/UserGuide/DocumentHistory.md index 05b1ea92d..190f3902a 100644 --- a//AWSEC2/latest/UserGuide/DocumentHistory.md +++ b//AWSEC2/latest/UserGuide/DocumentHistory.md @@ -12,0 +13,3 @@ Change| Description| Date +[Updated managed policies for the EC2 Fast Launch service linked role](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-iam-awsmanpol.html#security-iam-awsmanpol-EC2FastLaunchServiceRolePolicy)| Updated the EC2 Fast Launch service linked role policy with access to create and maintain Amazon EventBridge event rules, and other actions to enhance the EC2 Fast Launch experience. For more information about permissions granted by the service linked role, see [Permissions granted by `EC2FastLaunchServiceRolePolicy`](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/slr-windows-fast-launch.html#slr-permissions-granted-win-faster-launching).| May 14, 2025 +[Updated managed policies for the EC2 Fast Launch full access policy](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-iam-awsmanpol.html#security-iam-awsmanpol-EC2FastLaunchFullAccess)| Updated the EC2 Fast Launch full access policy with permission to Create and Modify Launch Template operations, to create network and security group resources, authorize ingress rules, and delete resources that EC2 Fast Launch created. The policy can additionally describe and create CloudFormation stacks, and delete stacks that EC2 Fast Launch created.| May 14, 2025 +[Simplified onboarding for EC2 Fast Launch](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/win-start-fast-launch-prereqs.html)| Updated EC2 Fast Launch to simplify the onboarding process.| May 14, 2025