AWS AWSEC2 documentation change
Summary
Simplified documentation by removing detailed steps for enabling ENA on older Amazon Linux AMIs, now stating that AMIs include required drivers by default
Security assessment
The change removes procedural steps for enabling enhanced networking, indicating modern AMIs have ENA enabled by default. While ENA relates to network performance, there's no evidence this change addresses a security vulnerability or weakness. It's a documentation simplification rather than security-related update.
Diff
diff --git a/AWSEC2/latest/UserGuide/enhanced-networking-ena.md b/AWSEC2/latest/UserGuide/enhanced-networking-ena.md index 6b9b841b0..4cd757d90 100644 --- a//AWSEC2/latest/UserGuide/enhanced-networking-ena.md +++ b//AWSEC2/latest/UserGuide/enhanced-networking-ena.md @@ -195,55 +195 @@ The procedure that you use depends on the operating system of the instance. -Amazon Linux 2 and the latest versions of the Amazon Linux AMI include the kernel driver required for enhanced networking with ENA installed and have ENA support enabled. Therefore, if you launch an instance with an HVM version of Amazon Linux on a supported instance type, enhanced networking is already enabled for your instance. For more information, see Test whether enhanced networking is enabled. - -If you launched your instance using an older Amazon Linux AMI and it does not have enhanced networking enabled already, use the following procedure to enable enhanced networking. - -###### To enable enhanced networking on Amazon Linux AMI - - 1. Connect to your instance. - - 2. From the instance, run the following command to update your instance with the latest kernel drivers, including `ena`: - - [ec2-user ~]$ **sudo yum** update - - 3. From your local computer, reboot your instance using the Amazon EC2 console or one of the following commands: [reboot-instances](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/reboot-instances.html) (AWS CLI) or [Restart-EC2Instance](https://docs.aws.amazon.com/powershell/latest/reference/items/Restart-EC2Instance.html) (AWS Tools for Windows PowerShell). - - 4. Connect to your instance again and verify that the `ena` kernel driver is installed and at the minimum recommended version using the **modinfo ena** command from Test whether enhanced networking is enabled. - - 5. [EBS-backed instance] From your local computer, stop the instance using the Amazon EC2 console or one of the following commands: [stop-instances](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/stop-instances.html) (AWS CLI) or [Stop-EC2Instance](https://docs.aws.amazon.com/powershell/latest/reference/items/Stop-EC2Instance.html) (AWS Tools for Windows PowerShell). - -[Instance store-backed instance] You can't stop the instance to modify the attribute. Instead, proceed to this procedure: To enable enhanced networking on Amazon Linux AMI (instance store-backed instances). - - 6. From your local computer, enable the enhanced networking attribute using one of the following commands: - - * [modify-instance-attribute](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/modify-instance-attribute.html) (AWS CLI) - - aws ec2 modify-instance-attribute --instance-id i-1234567890abcdef0 --ena-support - - * [Edit-EC2InstanceAttribute](https://docs.aws.amazon.com/powershell/latest/reference/items/Edit-EC2InstanceAttribute.html) (Tools for Windows PowerShell) - - Edit-EC2InstanceAttribute -InstanceId i-1234567890abcdef0 -EnaSupport $true - - 7. (Optional) Create an AMI from the instance, as described in [Create an Amazon EBS-backed AMI](./creating-an-ami-ebs.html). The AMI inherits the enhanced networking `enaSupport` attribute from the instance. Therefore, you can use this AMI to launch another instance with enhanced networking enabled by default. - - 8. From your local computer, start the instance using the Amazon EC2 console or one of the following commands: [start-instances](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/start-instances.html) (AWS CLI) or [Start-EC2Instance](https://docs.aws.amazon.com/powershell/latest/reference/items/Start-EC2Instance.html) (AWS Tools for Windows PowerShell). - - 9. Connect to your instance and verify that the `ena` kernel driver is installed and loaded on your network interface using the **ethtool -i eth`n`** command from Test whether enhanced networking is enabled. - -If you are unable to connect to your instance after enabling enhanced networking, see [Troubleshoot the ENA kernel driver on Linux](./troubleshooting-ena.html). - - - - -###### To enable enhanced networking on Amazon Linux AMI (instance store-backed instances) - -Follow the previous procedure until the step where you stop the instance. Create a new AMI as described in [Create an instance store-backed AMI](./creating-an-ami-instance-store.html), making sure to enable the enhanced networking attribute when you register the AMI. - - * [register-image](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ec2/register-image.html) (AWS CLI) - - aws ec2 register-image --ena-support ... - - * [Register-EC2Image](https://docs.aws.amazon.com/powershell/latest/reference/items/Register-EC2Image.html) (AWS Tools for Windows PowerShell) - - Register-EC2Image -EnaSupport $true ... - - - +The AMIs for Amazon Linux include the kernel driver required for enhanced networking with ENA installed and have ENA support enabled. Therefore, if you launch an instance with an HVM version of Amazon Linux on a supported instance type, enhanced networking is already enabled for your instance. For more information, see Test whether enhanced networking is enabled.