AWS prescriptive-guidance documentation change
Summary
Updated author attribution, corrected quotation marks in error messages, and clarified instructions for resolving Active Directory module installation issues.
Security assessment
Changes include formatting fixes and procedural clarifications. While the solution references installing Active Directory modules via EC2 user data, this does not directly address a security vulnerability or introduce new security documentation.
Diff
diff --git a/prescriptive-guidance/latest/patterns/remove-amazon-ec2-entries-in-the-same-aws-account-from-aws-managed-microsoft-ad.md b/prescriptive-guidance/latest/patterns/remove-amazon-ec2-entries-in-the-same-aws-account-from-aws-managed-microsoft-ad.md index 53ed69fde..1d6e68db2 100644 --- a//prescriptive-guidance/latest/patterns/remove-amazon-ec2-entries-in-the-same-aws-account-from-aws-managed-microsoft-ad.md +++ b//prescriptive-guidance/latest/patterns/remove-amazon-ec2-entries-in-the-same-aws-account-from-aws-managed-microsoft-ad.md @@ -9 +9 @@ SummaryPrerequisites and limitationsArchitectureToolsBest practicesEpicsTroubles - _Created by Dr. Rahul Sharad Gaikwad (AWS) and Tamilselvan P (AWS)_ + _Dr. Rahul Sharad Gaikwad and Tamilselvan P, Amazon Web Services_ @@ -197 +197 @@ Issue| Solution -If you try to remove the AD computer, you get an ”Access Denied” message. The AD computer can’t be removed because, by default, the action tries to remove two private IP addresses which are connected as a part of the AD services.| To avoid this error, use the following Python operation to ignore the first two computers when you list the differences between an AD computer output and the output of your machine running Windows. +If you try to remove the AD computer, you get an "Access Denied" message. The AD computer can’t be removed because, by default, the action tries to remove two private IP addresses which are connected as a part of the AD services.| To avoid this error, use the following Python operation to ignore the first two computers when you list the differences between an AD computer output and the output of your machine running Windows. @@ -202 +202 @@ If you try to remove the AD computer, you get an ”Access Denied” message. Th -When Lambda executes a PowerShell script on a Windows server, it expects Active Directory modules to be available by default. If the modules are not available, a Lambda function creates an error that states “Get-AdComputer is not installed on instance”.| To avoid this error, install the required modules by using the user data of the EC2 instances. Use the [EC2WindowsUserdata](https://github.com/aws-samples/aws-lambda-ad-cleanup-terraform-samples/blob/main/EC2WindowsUserdata) script that’s in this pattern’s GitHub repository. +When Lambda executes a PowerShell script on a Windows server, it expects Active Directory modules to be available by default. If the modules are not available, a Lambda function creates an error that states "Get-AdComputer is not installed on instance".| To avoid this error, install the required modules by using the user data of the EC2 instances. Use the [EC2WindowsUserdata](https://github.com/aws-samples/aws-lambda-ad-cleanup-terraform-samples/blob/main/EC2WindowsUserdata) script that’s in this pattern’s GitHub repository.