AWS pcs documentation change
Summary
Added an option for AWS PCS to automatically create basic instance profiles during compute node group creation.
Security assessment
Simplifies secure configuration by automating IAM instance profile creation, a security best practice, but does not address a specific vulnerability.
Diff
diff --git a/pcs/latest/userguide/security-instance-profiles.md b/pcs/latest/userguide/security-instance-profiles.md index a9a855219..0c2217bcf 100644 --- a//pcs/latest/userguide/security-instance-profiles.md +++ b//pcs/latest/userguide/security-instance-profiles.md @@ -73 +73,8 @@ You can also include your own IAM policies that support your specific use case. -You can create an instance profile directly from the Amazon EC2 console. For more information, see [Using instance profiles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2_instance-profiles.html) in the _AWS Identity and Access Management User Guide_. +To create an instance profile, you can: + + * Select **Create a basic profile** when you create a compute node group to have AWS PCS create one for you with the minimum required policy. + + * Create an instance profile directly from the Amazon EC2 console. For more information, see [Using instance profiles](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_switch-role-ec2_instance-profiles.html) in the _AWS Identity and Access Management User Guide_. + + +