AWS marketplace high security documentation change
Summary
Expanded AMI scanning requirements and procedures for AWS Marketplace submissions
Security assessment
The change mandates AMI scanning for CVE detection and security best practices verification, directly addressing vulnerability management. This helps prevent deployment of insecure AMIs with known vulnerabilities.
Diff
diff --git a/marketplace/latest/userguide/best-practices-for-building-your-amis.md b/marketplace/latest/userguide/best-practices-for-building-your-amis.md index 80b5f9309..124e1e194 100644 --- a//marketplace/latest/userguide/best-practices-for-building-your-amis.md +++ b//marketplace/latest/userguide/best-practices-for-building-your-amis.md @@ -122 +122,29 @@ For more information related to security, see the following resources: -To verify your AMI before submitting it as a new version, use the Test 'Add Version' feature in the AWS Marketplace Management Portal. Test 'Add Version' will check for unpatched common vulnerabilities and exposures (CVEs) and verify that your AMI follows security best practices. For more information, see Preparing and securing your AMI for AWS Marketplace +To publish your AMI on the AWS Marketplace Catalog, you must complete AMI scanning. AMI scanning checks for unpatched common vulnerabilities and exposures (CVEs) and verifies that your AMI follows security best practices. For more information, refer to [Preparing and securing your AMI for AWS Marketplace](https://docs.aws.amazon.com/marketplace/latest/userguide/best-practices-for-building-your-amis.html#securing-an-ami) + +To perform AMI scanning, choose one of the following options: + +**Option 1: Assets menu** + +This method allows for scanning AMIs outside of the product creation flow. It’s also useful for SaaS sellers using SAAS Quick Launch who need to scan assets without creating an AMI product. + + 1. From the [AWS Marketplace Management Portal](https://aws.amazon.com/marketplace/management/homepage), navigate to the **Assets** menu and choose **Amazon Machine Image**. + + 2. To start the scanning process, choose **Add AMI**. + + 3. You can view the AMIs scan status by returning to this page. + + + + +**Option 2: Request changes menu** + +This option is available for sellers who have already created an AMI product. Learn more at [Creating AMI-based products](./ami-single-ami-products.html) + + 1. From the [AWS Marketplace Management Portal](https://aws.amazon.com/marketplace/management/homepage), navigate to the **Products** menu and choose **Server**. + + 2. Select your product from **Server products**. + + 3. Navigate to the **Request changes** menu and select **Update versions**. + + 4. Select **Test ‘Add version’**. + @@ -124 +151,0 @@ To verify your AMI before submitting it as a new version, use the Test 'Add Vers -__ @@ -126 +152,0 @@ __ -From the AWS Marketplace Management Portal, choose **Amazon Machine Image** from the **Assets** menu. Choose **Add AMI** to start the scanning process. You can see the scan status of AMIs by returning to this page.