AWS AWSEC2 documentation change
Summary
Restructured headers, added PowerShell section for endpoint creation, clarified UI elements and CLI parameters
Security assessment
Changes focus on documentation structure and adding PowerShell support without addressing security vulnerabilities or introducing new security features. The 'Preserve Client IP' clarification improves documentation but doesn't indicate a security fix
Diff
diff --git a/AWSEC2/latest/UserGuide/create-ec2-instance-connect-endpoints.md b/AWSEC2/latest/UserGuide/create-ec2-instance-connect-endpoints.md index c6d927f2f..9ffc4735d 100644 --- a//AWSEC2/latest/UserGuide/create-ec2-instance-connect-endpoints.md +++ b//AWSEC2/latest/UserGuide/create-ec2-instance-connect-endpoints.md @@ -5,2 +4,0 @@ -PrerequisitesShared subnetsCreate using the consoleCreate using the AWS CLI - @@ -13 +11 @@ You can't modify an EC2 Instance Connect Endpoint after you've created it. Inste -## Prerequisites +###### Prerequisites @@ -17 +15 @@ You must have the required IAM permissions to create an EC2 Instance Connect End -## Shared subnets +###### Shared subnets @@ -21 +19 @@ You can create an EC2 Instance Connect Endpoint in a subnet that is shared with -## Create the endpoint using the console +Console @@ -23 +20,0 @@ You can create an EC2 Instance Connect Endpoint in a subnet that is shared with -Use the following procedure to create an EC2 Instance Connect Endpoint. @@ -35 +32 @@ Use the following procedure to create an EC2 Instance Connect Endpoint. - 2. For **Service category** , choose **EC2 Instance Connect Endpoint**. + 2. For **Type** , choose **EC2 Instance Connect Endpoint**. @@ -37 +34 @@ Use the following procedure to create an EC2 Instance Connect Endpoint. - 3. For **VPC** , select the VPC that has the target instances. + 3. Under **Network settings** , for **VPC** , select the VPC that has the target instances. @@ -39 +36 @@ Use the following procedure to create an EC2 Instance Connect Endpoint. - 4. (Optional) To preserve client IP addresses, expand **Additional settings** and select the check box. Otherwise, the default is to use the endpoint network interface as the client IP address. + 4. (Optional) To preserve client IP addresses, expand **Additional settings** and select the **Preserve Client IP** check box. Otherwise, the default is to use the endpoint network interface as the client IP address. @@ -56 +53 @@ The initial status of the endpoint is **Pending**. Before you can connect to an -## Create the endpoint using the AWS CLI +AWS CLI @@ -58,3 +54,0 @@ The initial status of the endpoint is **Pending**. Before you can connect to an -Use the [create-instance-connect-endpoint](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/create-instance-connect-endpoint.html) command to create an EC2 Instance Connect Endpoint. - -###### Prerequisites @@ -62,3 +56 @@ Use the [create-instance-connect-endpoint](https://awscli.amazonaws.com/v2/docum -Install AWS CLI version 2 and configure it using your credentials. For more information, see [Install or update to the latest version of the AWS CLI](https://docs.aws.amazon.com/cli/latest/userguide/getting-started-install.html) and [Configure the AWS CLI](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-configure.html) in the _AWS Command Line Interface User Guide_. Alternatively, open AWS CloudShell and run AWS CLI commands in its pre-authenticated shell. - -###### To create the endpoint +###### To create an EC2 Instance Connect Endpoint @@ -66 +58 @@ Install AWS CLI version 2 and configure it using your credentials. For more info -Use the following command to create an endpoint network interface for your EC2 Instance Connect Endpoint in the specified subnet. +Use the [create-instance-connect-endpoint](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/create-instance-connect-endpoint.html) command. @@ -98 +90 @@ The following is example output. -The initial value for the `State` field is `create-in-progress`. Before you can connect to an instance using this endpoint, wait until the state is `create-complete`. Use the [describe-instance-connect-endpoints](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/describe-instance-connect-endpoints.html) command to monitor the status of the EC2 Instance Connect Endpoint. The --query parameter filters the results to the `State` field. +The initial value for the `State` field is `create-in-progress`. Before you can connect to an instance using this endpoint, wait until the state is `create-complete`. Use the [describe-instance-connect-endpoints](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/describe-instance-connect-endpoints.html) command to monitor the status of the EC2 Instance Connect Endpoint. The `--query` parameter filters the results to the `State` field. @@ -105,0 +98,41 @@ The following is example output. + create-complete + +PowerShell + + +###### To create the EC2 Instance Connect Endpoint + +Use the [New-EC2InstanceConnectEndpoint](https://docs.aws.amazon.com/powershell/latest/reference/items/New-EC2InstanceConnectEndpoint.html) cmdlet. + + + New-EC2InstanceConnectEndpoint -SubnetId subnet-0123456789example + +The following is example output. + + + OwnerId : 111111111111 + InstanceConnectEndpointId : eice-0123456789example + InstanceConnectEndpointArn : arn:aws:ec2:us-east-1:111111111111:instance-connect-endpoint/eice-0123456789example + State : create-complete + StateMessage : + DnsName : eice-0123456789example.0123abcd.ec2-instance-connect-endpoint.us-east-1.amazonaws.com + FipsDnsName : eice-0123456789example.0123abcd.fips.ec2-instance-connect-endpoint.us-east-1.amazonaws.com + NetworkInterfaceIds : {eni-0123abcd} + VpcId : vpc-0123abcd + AvailabilityZone : us-east-1a + CreatedAt : 4/7/2023 3:43:53 PM + SubnetId : subnet-0123abcd + PreserveClientIp : False + SecurityGroupIds : {sg-0123abcd} + Tags : {} + +###### To monitor the creation status + +The initial value for the `State` field is `create-in-progress`. Before you can connect to an instance using this endpoint, wait until the state is `create-complete`. Use the [Get-EC2InstanceConnectEndpoint](https://docs.aws.amazon.com/powershell/latest/reference/items/Get-EC2InstanceConnectEndpoint.html) cmdlet to monitor the status of the EC2 Instance Connect Endpoint. `.State.Value` filters the results to the `State` field. + + + (Get-EC2InstanceConnectEndpoint -InstanceConnectEndpointId "eice-0123456789example").State.Value + +The following is example output. + +