AWS workspaces-thin-client high security documentation change
Summary
Updated documentation about Software sets to clarify update types (monthly feature updates vs urgent security patches), added expiration policies (40 days for regular updates vs 3 days for security updates), and emphasized mandatory security updates overriding maintenance windows
Security assessment
Explicitly documents security-specific update handling: 1) Security patches trigger 3-day expiration for all prior versions (vs 40 days for regular updates) 2) Mandates immediate security updates to maintain device security 3) Reveals service forces automatic security updates regardless of user sessions when expired. These changes directly address security patch management processes and vulnerabilities from outdated software.
Diff
diff --git a/workspaces-thin-client/latest/ag/software-updates.md b/workspaces-thin-client/latest/ag/software-updates.md index a3818790c..63d436567 100644 --- a//workspaces-thin-client/latest/ag/software-updates.md +++ b//workspaces-thin-client/latest/ag/software-updates.md @@ -7 +7 @@ -WorkSpaces Thin Client sometimes requires software updates that introduce new functionality and apply security patches. These updates are represented by a versioned **Software set**. +WorkSpaces Thin Client requires software updates periodically to introduce new functionality and apply security patches. These updates are represented by a versioned **Software set**. @@ -9 +9 @@ WorkSpaces Thin Client sometimes requires software updates that introduce new fu -A **Software set** can contain updates to the software applications or operating system for the WorkSpaces Thin Client device. From this console, you can choose to update the software immediately or you can schedule an automatic update during the maintenance window for the environments. +A **Software set** can contain updates for software applications or the operating system of the WorkSpaces Thin Client device. From this console, you can choose to update the software immediately or schedule an automatic update during the maintenance window for the environments. @@ -11 +11,5 @@ A **Software set** can contain updates to the software applications or operating -Refer to [ WorkSpaces Thin Client environment software sets](./environment-software-sets.html) for the list of released Software Sets. +There are two types of Software sets: + + * Software sets that introduce new functionality, fix defects, and make general improvements. These are released monthly. + + * Software sets that contain security patches and fixes for critical issues. These are released as needed. @@ -13 +16,0 @@ Refer to [ WorkSpaces Thin Client environment software sets](./environment-softw -###### Topics @@ -15 +17,0 @@ Refer to [ WorkSpaces Thin Client environment software sets](./environment-softw - * [Updating environment software](./environment-software-update.html) @@ -17 +18,0 @@ Refer to [ WorkSpaces Thin Client environment software sets](./environment-softw - * [Updating device software](./device-software-update.html) @@ -19 +20 @@ Refer to [ WorkSpaces Thin Client environment software sets](./environment-softw - * [WorkSpaces Thin Client software releases](./environment-software-sets.html) +As an administrator, if you haven’t enabled automatic software updates on your environment, devices registered to that environment won’t receive software updates until you manually push the update. @@ -20,0 +22 @@ Refer to [ WorkSpaces Thin Client environment software sets](./environment-softw +As new Software sets are released, older Software sets expire. Starting from the date of release of a Software set with new functionality, you have 40 days before prior Software sets expire. @@ -21,0 +24 @@ Refer to [ WorkSpaces Thin Client environment software sets](./environment-softw +To ensure the security posture of the device remains intact, the service automatically updates devices if it detects expired software. This type of update can interrupt active sessions because it won’t honor the maintenance window or allow end users to delay the update. To avoid this, we recommend updating Software sets at least once every 30 days. @@ -22,0 +26,5 @@ Refer to [ WorkSpaces Thin Client environment software sets](./environment-softw +###### Note + +If a Software set with security patches or a critical update is released, all prior Software sets will be set to expire in 3 days. To ensure your device remains secure and minimize disruption to daily operations, we recommend updating these Software sets immediately. + +Refer to [ WorkSpaces Thin Client environment software sets](./environment-software-sets.html) for the list of released Software Sets.