AWS Security ChangesHomeSearch

AWS prescriptive-guidance documentation change

Service: prescriptive-guidance · 2025-11-07 · Documentation low

File: prescriptive-guidance/latest/security-reference-architecture/iot-sra.md

Summary

Replaced 'Amazon AppStream 2.0' with 'Amazon WorkSpaces Applications' in industrial isolation context

Security assessment

This is a service name update without security implications. The existing security context about malware scanning and secure file exchange remains unchanged. No evidence of addressing a security vulnerability.

Diff

diff --git a/prescriptive-guidance/latest/security-reference-architecture/iot-sra.md b/prescriptive-guidance/latest/security-reference-architecture/iot-sra.md
index e5fe91431..13fe3456c 100644
--- a//prescriptive-guidance/latest/security-reference-architecture/iot-sra.md
+++ b//prescriptive-guidance/latest/security-reference-architecture/iot-sra.md
@@ -97 +97 @@ This approach also makes it easier to implement strong access control and least
-Hosting services in the Industrial Isolation account on AWS provide enhanced flexibility, scalability, security, and integration capabilities compared with on-premises solutions, and enable more efficient and flexible management of industrial edge operations. For example, you can provide streaming access to your end-user applications by using [Amazon AppStream 2.0](https://aws.amazon.com/appstream2/) and use [Amazon GuardDuty Malware Protection for S3](https://docs.aws.amazon.com/guardduty/latest/ug/gdu-malware-protection-s3.html) to provide malware scanning capabilities as part of a secure file exchange solution that spans IT and OT environments. The Industrial Isolation account uses the shared connectivity constructs in the Network account, such as [AWS Transit Gateway](https://docs.aws.amazon.com/vpc/latest/tgw/what-is-transit-gateway.html), to obtain the required connectivity to the desired on-premises resources. 
+Hosting services in the Industrial Isolation account on AWS provide enhanced flexibility, scalability, security, and integration capabilities compared with on-premises solutions, and enable more efficient and flexible management of industrial edge operations. For example, you can provide streaming access to your end-user applications by using [Amazon WorkSpaces Applications](https://aws.amazon.com/appstream2/) and use [Amazon GuardDuty Malware Protection for S3](https://docs.aws.amazon.com/guardduty/latest/ug/gdu-malware-protection-s3.html) to provide malware scanning capabilities as part of a secure file exchange solution that spans IT and OT environments. The Industrial Isolation account uses the shared connectivity constructs in the Network account, such as [AWS Transit Gateway](https://docs.aws.amazon.com/vpc/latest/tgw/what-is-transit-gateway.html), to obtain the required connectivity to the desired on-premises resources.