AWS AWSEC2 documentation change
Summary
Added documentation for modifying EC2 Instance Connect Endpoints and updated managed policy permissions for IPv6 and security group modifications. Adjusted PTP hardware clock instance type support list.
Security assessment
The managed policy update documents new permissions for security group and IPv6 modifications, which are security-related configurations. No evidence of addressing a specific vulnerability.
Diff
diff --git a/AWSEC2/latest/UserGuide/DocumentHistory.md b/AWSEC2/latest/UserGuide/DocumentHistory.md index 5cbebc7d1..f6e97de79 100644 --- a//AWSEC2/latest/UserGuide/DocumentHistory.md +++ b//AWSEC2/latest/UserGuide/DocumentHistory.md @@ -12,0 +13 @@ Change| Description| Date +[Modify EC2 Instance Connect Endpoint](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/modify-ec2-instance-connect-endpoint.html)| You can now modify an existing EC2 Instance Connect Endpoint using the AWS CLI or an SDK.| August 14, 2025 @@ -13,0 +15 @@ Change| Description| Date +[Updated managed policy for EC2 Instance Connect Endpoint](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-iam-awsmanpol.html#Ec2InstanceConnectEndpoint)| To support the modification of existing EC2 Instance Connect Endpoints, Amazon EC2 updated the `Ec2InstanceConnectEndpoint` policy to add permissions to assign and unassign IPv6 addresses and modify security groups on network interfaces created by EC2 Instance Connect Endpoint. Amazon EC2 also updated this policy to replace the `Null` condition operator with the `StringLike` condition operator.| July 31, 2025 @@ -66 +68 @@ U7i-12tb, U7in-16tb, U7in-24tb, and U7in-32tb instances| New high memory instanc -[PTP hardware clock – instance type support](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/set-time.html#connect-to-the-ptp-hardware-clock)| The PTP hardware clock is now available on C7a, C7i, M7a, M7g, M7i, R7a, and R7i instance types.| April 22, 2024 +[PTP hardware clock – instance type support](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/set-time.html#connect-to-the-ptp-hardware-clock)| The PTP hardware clock is now available on M7a, M7g, M7i, R7a, and R7i instance types.| April 22, 2024