AWS ec2 medium security documentation change

Service: ec2 · 2025-06-28 · Security-related medium

File: ec2/latest/devguide/example_ec2_GetPasswordData_section.md

Summary

Added PowerShell V5 examples for GetPasswordData operation including password decryption examples

Security assessment

The change documents password decryption processes for Windows instances, which directly relates to credential security management. Example 3 explicitly shows handling encrypted credentials

Diff

diff --git a/ec2/latest/devguide/example_ec2_GetPasswordData_section.md b/ec2/latest/devguide/example_ec2_GetPasswordData_section.md
index 6a7bf8f97..f870bacd6 100644
--- a//ec2/latest/devguide/example_ec2_GetPasswordData_section.md
+++ b//ec2/latest/devguide/example_ec2_GetPasswordData_section.md
@@ -192,0 +193,41 @@ PowerShell
+
+
+
+**Tools for PowerShell V5**
+    
+
+**Example 1: This example decrypts the password that Amazon EC2 assigned to the Administrator account for the specified Windows instance. As a pem file was specified, the setting of the -Decrypt switch is automatically assumed.**
+    
+    
+    Get-EC2PasswordData -InstanceId i-12345678 -PemFile C:\path\my-key-pair.pem
+    
+
+**Output:**
+    
+    
+    mYZ(PA9?C)Q
+
+**Example 2: (Windows PowerShell only) Inspects the instance to determine the name of the keypair used to launch the instance and then attempts to find the corresponding keypair data in the configuration store of the AWS Toolkit for Visual Studio. If the keypair data is found the password is decrypted.**
+    
+    
+    Get-EC2PasswordData -InstanceId i-12345678 -Decrypt
+    
+
+**Output:**
+    
+    
+    mYZ(PA9?C)Q
+
+**Example 3: Returns the encrypted password data for the instance.**
+    
+    
+    Get-EC2PasswordData -InstanceId i-12345678
+    
+
+**Output:**
+    
+    
+    iVz3BAK/WAXV.....dqt8WeMA==
+
+  * For API details, see [GetPasswordData](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_. 
+