AWS general documentation change
Summary
Updated service quotas documentation for Fleet Manager/GUI Connect with new session limits and licensing requirements
Security assessment
Adds documentation about session timeout limits and licensing requirements which relate to access control best practices. While security-adjacent, this does not address a specific security vulnerability.
Diff
diff --git a/general/latest/gr/ssm.md b/general/latest/gr/ssm.md index 8d57b5d3d..1fbce81d9 100644 --- a//general/latest/gr/ssm.md +++ b//general/latest/gr/ssm.md @@ -101 +101 @@ Unless otherwise specified, each quota applies to an individual AWS Region in ea - * Service quotas for Fleet Manager + * Service quotas for Fleet Manager / AWS Systems Manager GUI Connect @@ -186 +186 @@ Maximum number of resource data syncs | 5 -### Service quotas for Fleet Manager +### Service quotas for Fleet Manager / AWS Systems Manager GUI Connect @@ -190,2 +190,13 @@ Resource | Default -Maximum duration of an AWS Systems Manager GUI Connect Remote Desktop session | 60 minutes -Maximum number of AWS Systems Manager GUI Connect concurrent Remote Desktop sessions | 5 Service quota increase requests up to 25 are automatically approved. Service quota increases can take up to two and a half hours to take effect. +Maximum number of Systems Manager GUI Connect concurrent Remote Desktop sessions | 5 ¹ Service quota increase requests up to 25 are automatically approved. Service quota increases can take up to two and a half hours to take effect. +Maximum duration of an Systems Manager GUI Connect Remote Desktop session | 60 minutes +Maximum idle time for a Systems Manager GUI Connect Remote Desktop session before connection timeout | 10 minutes +Maximum connection persistence for a Systems Manager GUI Connect Remote Desktop session | 60 minutes (maximum connection duration) or 10 minutes (idle timeout limit). A connection persists until the maximum connection duration (60 minutes) or idle timeout limit (10 minutes) is met. The connection persists after IAM credentials expire if the connection duration limits are not met. + +¹ The standard license for Windows Server allows for two concurrent RDP connections. To support more connections, you must purchase additional Client Access Licenses (CALs) from Microsoft or Microsoft Remote Desktop Services licenses from AWS. For more information on supplemental licensing, see the following topics: + + * [Client Access Licenses and Management Licenses](https://www.microsoft.com/en-us/licensing/product-licensing/client-access-license) on the Microsoft website + + * [Use License Manager user-based subscriptions for supported software products](https://docs.aws.amazon.com/license-manager/latest/userguide/user-based-subscriptions.html) in the _License Manager User Guide_ + + +