AWS Security ChangesHomeSearch

AWS res high security documentation change

Service: res · 2025-09-28 · Security-related high

File: res/archive/release-minus-1/ug/revisions.md

Summary

Added release notes for June/July 2025 with IAM permission changes, bug fixes, and feature updates

Security assessment

Security-related changes include 'Scoped down IAM permissions' and 'Resolved Windows/Linux VDI login issues when disable_ad_join is true'. These directly address potential overprivileged access and authentication control issues. The IAM changes specifically improve security posture through least privilege.

Diff

diff --git a/res/archive/release-minus-1/ug/revisions.md b/res/archive/release-minus-1/ug/revisions.md
index 04688cd3e..1fd2f2d9a 100644
--- a//res/archive/release-minus-1/ug/revisions.md
+++ b//res/archive/release-minus-1/ug/revisions.md
@@ -10,0 +11,39 @@ Date | Change
+July 2025 | 
+
+  * Release version 2025.06.01 Enhancements
+    * Improved launch time of infra hosts and default VDIs by using system default Python.
+    * Added support for Ubuntu 24.04 VDI.
+Changes
+    * Infra hosts and VDIs now use system default Python if it is available and meets RES requirements (version higher than 3.9.16).
+Bug Fixes
+    * Resolved Windows and Linux VDI login issues when disable_ad_join is true.
+    * Resolved an issue where custom IAM policies were not being attached to project-specific roles.
+
+  
+June 2025 | 
+
+  * Release version 2025.06 Enhancements
+    * Added support for the AWS GovCloud (US-East) region.
+    * Added support for g6e instance type.
+    * Added support for launching virtual desktop sessions with Amazon Linux 2023.
+    * Added support for launching virtual desktop sessions with Rocky Linux 9.
+    * Added support for IAM resources prefix and path customization.
+    * Added the ability to delete a mounted file system from the RES UI.
+    * Added the ability to retrieve VDI bootstrap logs from Amazon CloudWatch.
+    * Enabled hibernation for RedHat 8 and RedHat 9 VDIs.
+Changes
+    * Scoped down IAM permissions for infrastructure hosts and VDI hosts.
+    * Improved bootstrap process for infrastructure hosts and VDI hosts.
+    * Increased the DCV broker DynamoDB tables WCU from 20 to 100.
+Bug Fixes
+    * Resolved an issue where RES can fail to list Elastic Filesystem for onboarding.
+    * Resolved an issue where RES can fail to apply snapshot caused by Elastic Filesystem listing.
+    * Resolved an issue where DCV Console session resolution cannot be adjusted.
+    * Resolved an issue where custom VDIs schedule can be deleted when re-saving the schedule without change.
+    * Resolved an issue where File browser can become unresponsive with large number of users and groups in AD.
+    * Resolved an issue where VDI sessions can be missing under Session Management.
+    * Resolved an issue where VDI session can be missing under My Virtual Desktop page.
+    * Resolved an issue where Idle timeout is not working for VDIs with hibernation enabled.
+    * Resolved an issue where software stack AMIs predate older RES version.
+
+