AWS managedservices high security documentation change
Summary
Added multiple new change types and updated existing entries, including security-sensitive operations (IAM policy updates, VPC endpoint policy updates, EC2 IMDS settings) marked as 'review required'
Security assessment
The additions include security-critical operations like IAM policy updates, VPC endpoint policy modifications, and EC2 IMDS region settings changes, which directly relate to access control and security configuration. The 'review required' flag indicates heightened scrutiny for these changes, addressing potential security risks such as improper permissions or IMDSv1 vulnerabilities.
Diff
diff --git a/managedservices/latest/ctref/doc-history-ct.md b/managedservices/latest/ctref/doc-history-ct.md index a1e8dd77d..9a336dac1 100644 --- a//managedservices/latest/ctref/doc-history-ct.md +++ b//managedservices/latest/ctref/doc-history-ct.md @@ -12,0 +13,12 @@ Change| Description| Date +Updated change type| [ Management | Advanced stack components | EBS Volume | Detach](https://docs.aws.amazon.com/managedservices/latest/ctref/schemas.html#ct-2d55p1d7z6w3d-schema-section)| September 25, 2025 +Updated change type| [ Management | Advanced stack components | Security group | Authorize ingress rule](https://docs.aws.amazon.com/managedservices/latest/ctref/schemas.html#ct-3j2zstluz6dxq-schema-section)| September 25, 2025 +Updated change type| [ Management | Advanced stack components | Identity and Access Management (IAM) | Update entity or policy (review required)](https://docs.aws.amazon.com/managedservices/latest/ctref/schemas.html#ct-27tuth19k52b4-schema-section)| September 25, 2025 +Updated change type| [ Deployment | Advanced stack components | Identity and Access Management (IAM) | Create entity or policy (review required)](https://docs.aws.amazon.com/managedservices/latest/ctref/schemas.html#ct-3dpd8mdd9jn1r-schema-section)| September 25, 2025 +Updated change type| [ Deployment | Advanced stack components | RDS database stack | Create option group (review required)](https://docs.aws.amazon.com/managedservices/latest/ctref/schemas.html#ct-10yi1sd9nst1c-schema-section)| September 25, 2025 +Updated Tips section for RDS Database Stack | Stop DB Instance| [ Management | Advanced stack components | RDS database stack | Stop DB instance](https://docs.aws.amazon.com/managedservices/latest/ctref/management-advanced-rds-database-stack-stop-db-instance.html)| September 25, 2025 +Updated Tips section for EBS Snapshot | Delete| [ Management | Advanced stack components | EBS snapshot | Delete](https://docs.aws.amazon.com/managedservices/latest/ctref/management-advanced-ebs-snapshot-delete.html)| September 25, 2025 +New change type: Update VPC Endpoint Policy| [ Management | Advanced stack components | VPC endpoint | Update policy (review required)](https://docs.aws.amazon.com/managedservices/latest/ctref/schemas.html#ct-128mp7mbxobd0-schema-section)| September 25, 2025 +New change type: Update EC2 Instance Metadata Service (IMDS) Region Setting| [ Management | Advanced stack components | EC2 instance stack | Update IMDS region-level default settings (review required)](https://docs.aws.amazon.com/managedservices/latest/ctref/schemas.html#ct-2o1knqxw39mkc-schema-section)| September 25, 2025 +New change type: Delete NAT gateway (review required)| [ Management | Advanced stack components | NAT gateway | Delete (review required)](https://docs.aws.amazon.com/managedservices/latest/ctref/schemas.html#ct-1rexstryxye1b-schema-section)| September 25, 2025 +New change type: Create ELB Listener Rule| [ Deployment | Advanced stack components | Load balancer (ELB) stack | Create listener rule](https://docs.aws.amazon.com/managedservices/latest/ctref/schemas.html#ct-18weo4vv83ynk-schema-section)| September 25, 2025 +Updated Tips section for Approve a CloudFormation ingest stack changeset| [ Management | Custom Stack | Stack from CloudFormation Template | Approve Changeset and Update](https://docs.aws.amazon.com/managedservices/latest/ctref/management-custom-stack-from-cloudformation-template-approve-changeset-and-update.html)| September 15, 2025