AWS Security ChangesHomeSearch

AWS AWSEC2 medium security documentation change

Service: AWSEC2 · 2025-05-22 · Security-related medium

File: AWSEC2/latest/UserGuide/ec2-mac-instances.md

Summary

Added documentation for configuring System Integrity Protection (SIP) and updated link texts for consistency

Security assessment

The addition of 'Configure System Integrity Protection for Amazon EC2 Mac instances' directly documents a macOS security feature that restricts unauthorized system modifications. SIP is a core security mechanism, and providing configuration guidance enhances security posture.

Diff

diff --git a/AWSEC2/latest/UserGuide/ec2-mac-instances.md b/AWSEC2/latest/UserGuide/ec2-mac-instances.md
index ee8e1375b..05307d827 100644
--- a//AWSEC2/latest/UserGuide/ec2-mac-instances.md
+++ b//AWSEC2/latest/UserGuide/ec2-mac-instances.md
@@ -48 +48 @@ Amazon EC2 Mac instances natively support the macOS operating system.
-  * [Update the operating system and software on Mac instances](./mac-instance-updates.html)
+  * [Update the operating system and software on Amazon EC2 Mac instances](./mac-instance-updates.html)
@@ -53,0 +54,2 @@ Amazon EC2 Mac instances natively support the macOS operating system.
+  * [Configure System Integrity Protection for Amazon EC2 Mac instances](./mac-sip-settings.html)
+
@@ -58 +60 @@ Amazon EC2 Mac instances natively support the macOS operating system.
-  * [Retrieve macOS AMI IDs using Systems Manager Parameter Store](./macos-ami-ids-parameter-store.html)
+  * [Retrieve macOS AMI IDs using AWS Systems Manager Parameter Store API](./macos-ami-ids-parameter-store.html)
@@ -85 +87 @@ The following considerations apply to Mac instances:
-  * On x86 Mac instances, automatic software updates are disabled. We recommend that you apply updates and test them on your instance before you put the instance into production. For more information, see [Update the operating system and software on Mac instances](./mac-instance-updates.html).
+  * On x86 Mac instances, automatic software updates are disabled. We recommend that you apply updates and test them on your instance before you put the instance into production. For more information, see [Update the operating system and software on Amazon EC2 Mac instances](./mac-instance-updates.html).