AWS AWSEC2 documentation change
Summary
Updated terminology from 'instance store-backed AMI' to 'Amazon S3-backed AMI' in multiple sections. Adjusted IAM policy examples and documentation to reflect S3-backed AMI workflows.
Security assessment
The change corrects terminology related to AMI storage backends but does not address a security vulnerability. While IAM policy accuracy is important for security, there is no evidence this fixes an exploit or weakness. It primarily reflects branding/naming conventions.
Diff
diff --git a/AWSEC2/latest/UserGuide/copy-ami-permissions.md b/AWSEC2/latest/UserGuide/copy-ami-permissions.md index 178add52d..f8e2a4cad 100644 --- a//AWSEC2/latest/UserGuide/copy-ami-permissions.md +++ b//AWSEC2/latest/UserGuide/copy-ami-permissions.md @@ -5 +5 @@ -Example IAM policy for copying an EBS-backed AMI and tagging the target AMI and snapshotsExample IAM policy for copying an EBS-backed AMI but denying tagging the new snapshotsExample IAM policy for copying an instance store-backed AMI and tagging the target AMI +Example IAM policy for copying an EBS-backed AMI and tagging the target AMI and snapshotsExample IAM policy for copying an EBS-backed AMI but denying tagging the new snapshotsExample IAM policy for copying an Amazon S3-backed AMI and tagging the target AMI @@ -9 +9 @@ Example IAM policy for copying an EBS-backed AMI and tagging the target AMI and -To copy an EBS-backed or instance store-backed AMI, you need the following IAM permissions: +To copy an EBS-backed or Amazon S3-backed AMI, you need the following IAM permissions: @@ -106 +106 @@ JSON -## Example IAM policy for copying an instance store-backed AMI and tagging the target AMI +## Example IAM policy for copying an Amazon S3-backed AMI and tagging the target AMI @@ -108 +108 @@ JSON -The following example policy grants you permission to copy any instance store-backed AMI in the specified source bucket to the specified Region, and tag the target AMI. +The following example policy grants you permission to copy any Amazon S3-backed AMI in the specified source bucket to the specified Region, and tag the target AMI. @@ -162 +162 @@ To find the Amazon Resource Name (ARN) of the AMI source bucket, open the Amazon -The `s3:CreateBucket` permission is only needed the first time that you copy an instance store-backed AMI to an individual Region. After that, the Amazon S3 bucket that is already created in the Region is used to store all future AMIs that you copy to that Region. +The `s3:CreateBucket` permission is only needed the first time that you copy an Amazon S3-backed AMI to an individual Region. After that, the Amazon S3 bucket that is already created in the Region is used to store all future AMIs that you copy to that Region.