AWS managedservices medium security documentation change
Summary
Updated documentation history with multiple changes including IAM policy example restrictions, control table cleanup, service deprecations, and formatting adjustments
Security assessment
The change 'Updated IAM policy example with more restrictions' directly improves security documentation by advocating for more restrictive policies. The 'patch management important security note' maintains existing security guidance. Deprecations and control table cleanup don't inherently address security issues.
Diff
diff --git a/managedservices/latest/userguide/doc-history-ug.md b/managedservices/latest/userguide/doc-history-ug.md index efc437ed3..097c1501d 100644 --- a//managedservices/latest/userguide/doc-history-ug.md +++ b//managedservices/latest/userguide/doc-history-ug.md @@ -21,0 +22,7 @@ Change| Description| Date +[Updated controls table ](https://docs.aws.amazon.com/managedservices/latest/userguide/ams-sec-stand-controls.html)| Removed some duplicate controls in the AMS-STD-002 - AWS Identity and Access Management (IAM) table section.| June 26, 2025 +[Updated SSP service AWS Transfer Family prerequisites](https://docs.aws.amazon.com/managedservices/latest/userguide/transfer-sftp.html)| Added information to the prerequisites section.| June 26, 2025 +[Updated IAM policy example](https://docs.aws.amazon.com/managedservices/latest/userguide/defaults-instance-profile.html)| Updated IAM policy example with more restrictions, as recommended.| June 26, 2025 +[Updated AMI supported OSes](https://docs.aws.amazon.com/managedservices/latest/userguide/ams-amis.html)| Added Ubuntu Linux 24.04 under Ubuntu Linux 22.04 and changed all references to SP5 to SP6.| June 26, 2025 +[Self-service provisioning service, MediaStore deprecated ](https://docs.aws.amazon.com/managedservices/latest/userguide/elemental-media-store.html)| Added deprecation note for AWS Elemental MediaStore.| June 26, 2025 +[Self-service provisioning service, Amazon Inspector Classic deprecated ](https://docs.aws.amazon.com/managedservices/latest/userguide/inspector.html)| Added deprecation note for Amazon Inspector Classic.| June 26, 2025 +[Self-service provisioning service, Amazon Connect deprecated ](https://docs.aws.amazon.com/managedservices/latest/userguide/connect.html)| Added deprecation note for Amazon Connect.| June 26, 2025 @@ -23,6 +30,6 @@ Change| Description| Date -[WorkDocs deprecated.](https://docs.aws.amazon.com/managedservices/latest/userguide/self-service-provisioning-section.html)| Removed page and references to deprecated WorkDocs.| June 19, 2025 -[Patch management important security note for alternate patch repositories.](https://docs.aws.amazon.com/managedservices/latest/userguide/patch-mgmt.html)| Important security note and best practices for using alternate patch repositories in AMS.| June 10, 2025 -[Supported operating systems updates.](https://docs.aws.amazon.com/managedservices/latest/userguide/supported-configs.html)| AMS Advanced supported operating systems are updated, some added, some removed.| May 22, 2025 -[Internal-only APIs.](https://docs.aws.amazon.com/managedservices/latest/userguide/internal-apis.html)| Internal-only APIs that appear in some CloudWatch logs.| May 22, 2025 -[AMS Trusted Remediator updates.](https://docs.aws.amazon.com/managedservices/latest/userguide/tr-configure-remediations.html)| How to use a new parameter, `preconfigured-parameters`, to customize Trusted Advisor checks in Trusted Remediator.| May 22, 2025 -[SSP Amazon Elastic Container Registry updates.](https://docs.aws.amazon.com/managedservices/latest/userguide/ecr.html)| More roles are automatically provisioned when you onboard the Amazon ECR service.| May 8, 2025 +[Self-service provisioning service, WorkDocs deprecated](https://docs.aws.amazon.com/managedservices/latest/userguide/self-service-provisioning-section.html)| Removed page and references to deprecated WorkDocs.| June 19, 2025 +[Patch management important security note for alternate patch repositories](https://docs.aws.amazon.com/managedservices/latest/userguide/patch-mgmt.html)| Important security note and best practices for using alternate patch repositories in AMS.| June 10, 2025 +[Supported operating systems updates](https://docs.aws.amazon.com/managedservices/latest/userguide/supported-configs.html)| AMS Advanced supported operating systems are updated, some added, some removed.| May 22, 2025 +[Internal-only APIs](https://docs.aws.amazon.com/managedservices/latest/userguide/internal-apis.html)| Internal-only APIs that appear in some CloudWatch logs.| May 22, 2025 +[AMS Trusted Remediator updates](https://docs.aws.amazon.com/managedservices/latest/userguide/tr-configure-remediations.html)| How to use a new parameter, `preconfigured-parameters`, to customize Trusted Advisor checks in Trusted Remediator.| May 22, 2025 +[SSP Amazon Elastic Container Registry updates](https://docs.aws.amazon.com/managedservices/latest/userguide/ecr.html)| More roles are automatically provisioned when you onboard the Amazon ECR service.| May 8, 2025