AWS imagebuilder documentation change
Summary
Added note about public internet requirement for Sysprep Specialize when launching instances from AMI
Security assessment
Documents security-relevant network requirements for successful instance launches, helping users avoid deployment failures in private subnets.
Diff
diff --git a/imagebuilder/latest/userguide/import-iso-disk.md b/imagebuilder/latest/userguide/import-iso-disk.md index cbe0438fa..8aac996b2 100644 --- a//imagebuilder/latest/userguide/import-iso-disk.md +++ b//imagebuilder/latest/userguide/import-iso-disk.md @@ -5 +5 @@ -Supported operating systems for ISO disk image importPrerequisitesImport an ISO disk image into Image Builder +Supported operating systems for ISO disk image importPrerequisitesImport an ISO disk image into Image BuilderLaunch an instance from the output AMI @@ -220,0 +221,4 @@ After the import is complete, your image appears in the list of images that you +## Launch an instance from the output AMI + +When you launch an instance from an AMI that the import process creates, the Windows operating system runs Sysprep Specialize, which automatically downloads and installs EC2Launch v2 and the Systems Manager Agent from public S3 endpoints. These endpoints require public internet access. If you launch an instance from a private subnet, the Sysprep Specialize process is unable to access the S3 endpoints, and the launch fails. +