AWS managedservices medium security documentation change
Summary
Documented updates to change types, including new parameters, exclusion of accounts, and new change types for S3 public access, RAM resolver rule sharing, and security group deletion.
Security assessment
The addition of the 'Update public access' change type directly relates to securing S3 buckets by controlling public access, a critical security feature. This addresses potential misconfigurations.
Diff
diff --git a/managedservices/latest/ctref/doc-history-ct.md b/managedservices/latest/ctref/doc-history-ct.md index e43ed2cde..5c772788a 100644 --- a//managedservices/latest/ctref/doc-history-ct.md +++ b//managedservices/latest/ctref/doc-history-ct.md @@ -13 +13,6 @@ Change| Description| Date -Updated change type, new parameter CopyTagsToNewEncryptedVolumes| [ Management | Advanced stack components | EC2 instance stack | Encrypt instance volumes](https://docs.aws.amazon.com/managedservices/latest/ctref/schemas.html#ct-0hahohe17csnc-schema-section)| April 24, 2025 +Updated change type| [ Management | Trusted Remediator | Remediation configuration | Update](https://docs.aws.amazon.com/managedservices/latest/ctref/schemas.html#ct-3kl2d1u40lrj8-schema-section) New parameter: `PreconfiguredParameters` allows you to change the values of preconfigured parameters in Trusted Advisor checks in Trusted Remediator.| May 20, 2025 +Updated change type| [ Deployment | AMS patterns | Solution | Deploy (review required)](https://docs.aws.amazon.com/managedservices/latest/ctref/schemas.html#ct-2jndrh7uit8uf-schema-section) New parameter: `ExcludeAccounts` allows you to exclude application accounts from stack instance creation when creating the StackSet stack.| May 20, 2025 +New change type| [ Management | Advanced stack components | S3 storage | Update public access](https://docs.aws.amazon.com/managedservices/latest/ctref/schemas.html#ct-0z8w5t4t1ti5m-schema-section)| May 20, 2025 +New change type| [ Deployment | Advanced stack components | Resource Access Manager (RAM) | Create resolver rule share](https://docs.aws.amazon.com/managedservices/latest/ctref/schemas.html#ct-1jy64y7yt71m4-schema-section)| May 20, 2025 +New change type| [ Management | Advanced stack components | Security group | Delete ](https://docs.aws.amazon.com/managedservices/latest/ctref/schemas.html#ct-18r16ldqil6w9-schema-section)| April 30, 2025 +Updated change type| [ Management | Advanced stack components | EC2 instance stack | Encrypt instance volumes](https://docs.aws.amazon.com/managedservices/latest/ctref/schemas.html#ct-0hahohe17csnc-schema-section) New parameter: `CopyTagsToNewEncryptedVolumes`.| April 24, 2025