AWS res high security documentation change
Summary
Added release notes for June/July 2025 with IAM permission changes, bug fixes, and feature updates
Security assessment
Security-related changes include 'Scoped down IAM permissions' and 'Resolved Windows/Linux VDI login issues when disable_ad_join is true'. These directly address potential overprivileged access and authentication control issues. The IAM changes specifically improve security posture through least privilege.
Diff
diff --git a/res/archive/release-minus-1/ug/revisions.md b/res/archive/release-minus-1/ug/revisions.md index 04688cd3e..1fd2f2d9a 100644 --- a//res/archive/release-minus-1/ug/revisions.md +++ b//res/archive/release-minus-1/ug/revisions.md @@ -10,0 +11,39 @@ Date | Change +July 2025 | + + * Release version 2025.06.01 Enhancements + * Improved launch time of infra hosts and default VDIs by using system default Python. + * Added support for Ubuntu 24.04 VDI. +Changes + * Infra hosts and VDIs now use system default Python if it is available and meets RES requirements (version higher than 3.9.16). +Bug Fixes + * Resolved Windows and Linux VDI login issues when disable_ad_join is true. + * Resolved an issue where custom IAM policies were not being attached to project-specific roles. + + +June 2025 | + + * Release version 2025.06 Enhancements + * Added support for the AWS GovCloud (US-East) region. + * Added support for g6e instance type. + * Added support for launching virtual desktop sessions with Amazon Linux 2023. + * Added support for launching virtual desktop sessions with Rocky Linux 9. + * Added support for IAM resources prefix and path customization. + * Added the ability to delete a mounted file system from the RES UI. + * Added the ability to retrieve VDI bootstrap logs from Amazon CloudWatch. + * Enabled hibernation for RedHat 8 and RedHat 9 VDIs. +Changes + * Scoped down IAM permissions for infrastructure hosts and VDI hosts. + * Improved bootstrap process for infrastructure hosts and VDI hosts. + * Increased the DCV broker DynamoDB tables WCU from 20 to 100. +Bug Fixes + * Resolved an issue where RES can fail to list Elastic Filesystem for onboarding. + * Resolved an issue where RES can fail to apply snapshot caused by Elastic Filesystem listing. + * Resolved an issue where DCV Console session resolution cannot be adjusted. + * Resolved an issue where custom VDIs schedule can be deleted when re-saving the schedule without change. + * Resolved an issue where File browser can become unresponsive with large number of users and groups in AD. + * Resolved an issue where VDI sessions can be missing under Session Management. + * Resolved an issue where VDI session can be missing under My Virtual Desktop page. + * Resolved an issue where Idle timeout is not working for VDIs with hibernation enabled. + * Resolved an issue where software stack AMIs predate older RES version. + +