AWS Security ChangesHomeSearch

AWS AWSEC2 medium security documentation change

Service: AWSEC2 · 2025-05-25 · Security-related medium

File: AWSEC2/latest/UserGuide/launch-instance-with-uefi-sb.md

Summary

Added TPM-enabled Windows Server 2025 AMIs to the list of supported AMIs for UEFI Secure Boot

Security assessment

The addition of TPM-enabled AMIs directly relates to security features (Trusted Platform Module integration), which enhances hardware-based security for cryptographic operations.

Diff

diff --git a/AWSEC2/latest/UserGuide/launch-instance-with-uefi-sb.md b/AWSEC2/latest/UserGuide/launch-instance-with-uefi-sb.md
index 8df553992..07fccc0f3 100644
--- a//AWSEC2/latest/UserGuide/launch-instance-with-uefi-sb.md
+++ b//AWSEC2/latest/UserGuide/launch-instance-with-uefi-sb.md
@@ -35,0 +36,4 @@ To launch a Windows instance, the Windows AMI must have UEFI Secure Boot enabled
+  * TPM-Windows_Server-2025-English-Core-Base
+
+  * TPM-Windows_Server-2025-English-Full-Base
+