AWS ebs documentation change
Summary
Updated Multi-Attach documentation with steps to enable via console and CLI, clarified io2 vs. io1 support, and restructured procedural guidance.
Security assessment
The changes clarify operational steps for enabling Multi-Attach and differentiate between io1/io2 volume types. While Multi-Attach has inherent security implications (e.g., data integrity risks), there is no evidence of addressing a specific security vulnerability. The modifications focus on feature usage instructions rather than introducing new security controls or addressing vulnerabilities.
Diff
diff --git a/ebs/latest/userguide/working-with-multi-attach.md b/ebs/latest/userguide/working-with-multi-attach.md index 5ba873e53..3ef593ca7 100644 --- a//ebs/latest/userguide/working-with-multi-attach.md +++ b//ebs/latest/userguide/working-with-multi-attach.md @@ -7 +7 @@ -Multi-Attach enabled volumes can be managed in much the same way that you would manage any other Amazon EBS volume. However, in order to use the Multi-Attach functionality, you must enable it for the volume. When you create a new volume, Multi-Attach is disabled by default. +Multi-Attach enabled volumes can be managed in much the same way that you would manage any other Amazon EBS volume. However, in order to use the Multi-Attach functionality, you must enable it for the volume. @@ -9 +9 @@ Multi-Attach enabled volumes can be managed in much the same way that you would -After you create a Multi-Attach enabled volume, you can attach it to an instance in the same way that you attach any other EBS volume. For more information, see [Attach an Amazon EBS volume to an Amazon EC2 instance](./ebs-attaching-volume.html). +When you create a new volume, Multi-Attach is disabled by default. You can enable Multi-Attach when you create a volume. @@ -11 +11,3 @@ After you create a Multi-Attach enabled volume, you can attach it to an instance -You can enable Multi-Attach during volume creation. Use one of the following methods. +You can also enable Multi-Attach for `io2` volumes after creation, but only if they are not attached to any instances. You can't enable Multi-Attach for `io1` volumes after creation. + +After you enable Multi-Attach for a volume, you can attach the volume to an instance in the same way that you attach any other EBS volume. For more information, see [Attach an Amazon EBS volume to an Amazon EC2 instance](./ebs-attaching-volume.html). @@ -40,2 +41,0 @@ If the selected snapshot is unencrypted and your account is not enabled for encr -###### Note - @@ -44 +44 @@ You can attach encrypted volumes only to instances that support Amazon EBS encry - 10. (Optional) To assign custom tags to the volume, in the **Tags** section, choose **Add tag** , and then enter a tag key and value pair. . + 10. (Optional) To assign custom tags to the volume, in the **Tags** section, choose **Add tag** , and then enter a tag key and value pair. @@ -51 +51 @@ You can attach encrypted volumes only to instances that support Amazon EBS encry -Command line +###### To enable Multi-Attach after creation @@ -52,0 +53 @@ Command line + 1. Open the Amazon EC2 console at [https://console.aws.amazon.com/ec2/](https://console.aws.amazon.com/ec2/). @@ -54 +55 @@ Command line -###### To enable Multi-Attach during volume creation + 2. In the navigation pane, choose **Volumes**. @@ -56 +57 @@ Command line -Use the [create-volume](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/create-volume.html) command and specify the `--multi-attach-enabled` parameter. + 3. Select the volume and choose **Actions** , **Modify volume**. @@ -57,0 +59 @@ Use the [create-volume](https://awscli.amazonaws.com/v2/documentation/api/latest + 4. For **Amazon EBS Multi-Attach** , choose **Enable Multi-Attach**. @@ -59 +61 @@ Use the [create-volume](https://awscli.amazonaws.com/v2/documentation/api/latest - $ C:\> aws ec2 create-volume --volume-type io2 **--multi-attach-enabled** --size 100 --iops 2000 --region us-west-2 --availability-zone us-west-2b + 5. Choose **Modify**. @@ -61 +62,0 @@ Use the [create-volume](https://awscli.amazonaws.com/v2/documentation/api/latest -You can also enable Multi-Attach for `io2` volumes after creation, but only if they are not attached to any instances. @@ -63 +63,0 @@ You can also enable Multi-Attach for `io2` volumes after creation, but only if t -###### Note @@ -65 +64,0 @@ You can also enable Multi-Attach for `io2` volumes after creation, but only if t -You can't enable Multi-Attach for `io1` volumes after creation. @@ -67 +66 @@ You can't enable Multi-Attach for `io1` volumes after creation. -Use one of the following methods to enable Multi-Attach for an `io2` volume after creation. +AWS CLI @@ -69 +67,0 @@ Use one of the following methods to enable Multi-Attach for an `io2` volume afte -Console @@ -70,0 +69 @@ Console +###### To enable Multi-Attach during volume creation @@ -72 +71 @@ Console -###### To enable Multi-Attach after creation +Use the [create-volume](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/create-volume.html) command with the `--multi-attach-enabled` option. @@ -74 +72,0 @@ Console - 1. Open the Amazon EC2 console at [https://console.aws.amazon.com/ec2/](https://console.aws.amazon.com/ec2/). @@ -76 +74,7 @@ Console - 2. In the navigation pane, choose **Volumes**. + aws ec2 create-volume \ + --volume-type io2 \ + --multi-attach-enabled \ + --size 100 \ + --iops 2000 \ + --region us-west-2 \ + --availability-zone us-west-2b @@ -78 +82 @@ Console - 3. Select the volume and choose **Actions** , **Modify volume**. +###### To enable Multi-Attach after creation @@ -80 +84 @@ Console - 4. For **Amazon EBS Multi-Attach** , choose **Enable Multi-Attach**. +Use the [modify-volume](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/modify-volume.html) command with the `--multi-attach-enabled` option. @@ -82 +85,0 @@ Console - 5. Choose **Modify**. @@ -83,0 +87,5 @@ Console + aws ec2 modify-volume \ + --volume-id vol-01234567890abcdef \ + --multi-attach-enabled + +PowerShell @@ -85,0 +94,3 @@ Console +###### To enable Multi-Attach during volume creation + +Use the [New-EC2Volume](https://docs.aws.amazon.com/powershell/latest/reference/items/New-EC2Volume.html) cmdlet with the `-MultiAttachEnabled` parameter. @@ -87 +97,0 @@ Console -Command line @@ -88,0 +99,7 @@ Command line + New-EC2Volume ` + -VolumeType io2 ` + -MultiAttachEnabled $true ` + -Size 100 ` + -Iops 2000 ` + -Region us-west-2 ` + -AvailabilityZone us-west-2b @@ -92 +109 @@ Command line -Use the [modify-volume](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/modify-volume.html) command and specify the `--multi-attach-enabled` parameter. +Use the [Edit-EC2Volume](https://docs.aws.amazon.com/powershell/latest/reference/items/Edit-EC2Volume.html) cmdlet with the `-MultiAttachEnabled` parameter. @@ -95 +112,3 @@ Use the [modify-volume](https://awscli.amazonaws.com/v2/documentation/api/latest - $ C:\> aws ec2 modify-volume --volume-id vol-1234567890abcdef0 --multi-attach-enabled + Edit-EC2Volume ` + -VolumeId vol-01234567890abcdef ` + -MultiAttachEnabled $true