AWS govcloud-us medium security documentation change
Summary
Removed requirement to launch EC2 instances in a VPC and updated VPC documentation links
Security assessment
Removing the mandatory VPC requirement reduces a security best practice (network isolation). This could weaken the default security posture for GovCloud EC2 instances.
Diff
diff --git a/govcloud-us/latest/UserGuide/govcloud-ec2.md b/govcloud-us/latest/UserGuide/govcloud-ec2.md index a3095c346..495e28663 100644 --- a//govcloud-us/latest/UserGuide/govcloud-ec2.md +++ b//govcloud-us/latest/UserGuide/govcloud-ec2.md @@ -96,2 +95,0 @@ The implementation of Amazon EC2 is different for AWS GovCloud (US) in the follo - * You must launch all Amazon EC2 instances in a virtual private cloud (VPC). In some cases, your account might have a default VPC; otherwise, you must create a VPC before launching instances. For more information, see Determining if your account has a default VPC. - @@ -128 +126 @@ VM Import/Export is different for AWS GovCloud (US) in the following ways: -In AWS GovCloud (US) Regions, you must launch all Amazon EC2 instances in a virtual private cloud (VPC). In some cases, your account might have a default VPC, where you launch all your Amazon EC2 instances. If your account doesn't have a default VPC, you must create a VPC before you can launch Amazon EC2 instances. For more information, see [What is Amazon VPC?](https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Introduction.html) in the _Amazon VPC User Guide_. +Your account might have a default VPC. If your account doesn't have a default VPC, you must create a VPC before you can launch EC2 instances. For more information, see [Virtual private clouds for your EC2 instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-vpc.html) in the _Amazon EC2 User Guide_. @@ -132 +130 @@ If you don't want a default VPC for your AWS GovCloud (US) account, you can dele -If you deleted your default VPC, you can create a new one. For more information, see [Create a default VPC](https://docs.aws.amazon.com/vpc/latest/userguide/work-with-default-vpc.html#create-default-vpc). +If you deleted your default VPC, you can create a new one. For more information, see [Create a default VPC](https://docs.aws.amazon.com/vpc/latest/userguide/work-with-default-vpc.html#create-default-vpc) in the _Amazon VPC User Guide_. @@ -140 +138 @@ The following documentation is based on the public AWS documentation. As you rea -[Amazon Elastic Compute Cloud documentation](https://aws.amazon.com/documentation/ec2/) +[Amazon Elastic Compute Cloud documentation](https://docs.aws.amazon.com/ec2/)