AWS ebs documentation change
Summary
Added PowerShell instructions for snapshot block public access and corrected AWS CLI example to use 'block-new-sharing' instead of multiple options.
Security assessment
The changes expand documentation for blocking public snapshot access (a security feature) by adding PowerShell support. The CLI example correction ensures proper syntax but does not indicate a resolved security flaw. While the feature itself is security-related, the changes are documentation improvements rather than vulnerability fixes.
Diff
diff --git a/ebs/latest/userguide/setting-up.md b/ebs/latest/userguide/setting-up.md index 4ce4fad00..7030bcb9e 100644 --- a//ebs/latest/userguide/setting-up.md +++ b//ebs/latest/userguide/setting-up.md @@ -153 +153,18 @@ Use the [enable-snapshot-block-public-access](https://awscli.amazonaws.com/v2/do - aws ec2 enable-snapshot-block-public-access --state block-all-sharing|block-new-sharing + aws ec2 enable-snapshot-block-public-access --state block-new-sharing + +PowerShell + + +###### To enable block public access for snapshots + +Use the [Enable-EC2SnapshotBlockPublicAccess](https://docs.aws.amazon.com/powershell/latest/reference/items/Enable-EC2SnapshotBlockPublicAccess.html) cmdlet. For `-State` specify one of the following values: + + * `block-all-sharing` — To block all public sharing of your snapshots. Users in the account can't request new public sharing. Additionally, snapshots that were already publicly shared are treated as private and are no longer publicly available. + + * `block-new-sharing` — To block only new public sharing of your snapshots. Users in the account can't request new public sharing. However, snapshots that were already publicly shared, remain publicly available. + + + + + + Enable-EC2SnapshotBlockPublicAccess -State block-new-sharing