AWS AWSEC2 documentation change
Summary
Replaced list of Windows AMIs with a link to updated documentation for finding UEFI Secure Boot-compatible AMIs
Security assessment
The change improves documentation about UEFI Secure Boot configuration, a security feature that ensures only signed software runs during boot. However, there is no evidence of addressing a specific security vulnerability.
Diff
diff --git a/AWSEC2/latest/UserGuide/launch-instance-with-uefi-sb.md b/AWSEC2/latest/UserGuide/launch-instance-with-uefi-sb.md index 07fccc0f3..7e22a4fba 100644 --- a//AWSEC2/latest/UserGuide/launch-instance-with-uefi-sb.md +++ b//AWSEC2/latest/UserGuide/launch-instance-with-uefi-sb.md @@ -34,28 +34 @@ Amazon Linux supports UEFI Secure Boot starting with AL2023 release 2023.1. Howe -To launch a Windows instance, the Windows AMI must have UEFI Secure Boot enabled. The following Windows AMIs are preconfigured to enable UEFI Secure Boot with Microsoft keys: - - * TPM-Windows_Server-2025-English-Core-Base - - * TPM-Windows_Server-2025-English-Full-Base - - * TPM-Windows_Server-2022-English-Core-Base - - * TPM-Windows_Server-2022-English-Full-Base - - * TPM-Windows_Server-2022-English-Full-SQL_2022_Enterprise - - * TPM-Windows_Server-2022-English-Full-SQL_2022_Standard - - * TPM-Windows_Server-2019-English-Core-Base - - * TPM-Windows_Server-2019-English-Full-Base - - * TPM-Windows_Server-2019-English-Full-SQL_2019_Enterprise - - * TPM-Windows_Server-2019-English-Full-SQL_2019_Standard - - * TPM-Windows_Server-2016-English-Core-Base - - * TPM-Windows_Server-2016-English-Full-Base - - - +To launch a Windows instance, the Windows AMI must have UEFI Secure Boot enabled. To find an AWS Windows AMI that's preconfigured for UEFI Secure Boot with Microsoft keys, see [Find Windows Server AMIs configured with NitroTPM and UEFI Secure Boot](https://docs.aws.amazon.com/ec2/latest/windows-ami-reference/ami-windows-tpm.html#ami-windows-tpm-find) in the _AWS Windows AMIs Reference_.