AWS cli documentation change
Summary
Updated documentation to reflect rebranding from AppStream 2.0 to WorkSpaces Applications, added root volume configuration parameter, removed specific graphics instance types, and updated CLI version references.
Security assessment
Changes primarily involve product name updates (AppStream 2.0 → WorkSpaces Applications) and feature additions (root volume config). No security vulnerabilities or explicit security enhancements are mentioned. IAM role documentation updates maintain existing security patterns without introducing new security controls.
Diff
diff --git a/cli/latest/reference/appstream/create-image-builder.md b/cli/latest/reference/appstream/create-image-builder.md index 2603a1d12..5521b1c51 100644 --- a//cli/latest/reference/appstream/create-image-builder.md +++ b//cli/latest/reference/appstream/create-image-builder.md @@ -15 +15 @@ - * [AWS CLI 2.31.37 Command Reference](../../index.html) » + * [AWS CLI 2.31.39 Command Reference](../../index.html) » @@ -81,0 +82 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/appstr + [--root-volume-config <value>] @@ -165 +165,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/appstr -> * stream.graphics-desktop.2xlarge @@ -172,3 +171,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/appstr -> * stream.graphics-pro.4xlarge -> * stream.graphics-pro.8xlarge -> * stream.graphics-pro.16xlarge @@ -276 +273 @@ JSON Syntax: -> The Amazon Resource Name (ARN) of the IAM role to apply to the image builder. To assume a role, the image builder calls the AWS Security Token Service (STS) `AssumeRole` API operation and passes the ARN of the role to use. The operation creates a new session with temporary credentials. AppStream 2.0 retrieves the temporary credentials and creates the **appstream_machine_role** credential profile on the instance. +> The Amazon Resource Name (ARN) of the IAM role to apply to the image builder. To assume a role, the image builder calls the AWS Security Token Service (STS) `AssumeRole` API operation and passes the ARN of the role to use. The operation creates a new session with temporary credentials. WorkSpaces Applications retrieves the temporary credentials and creates the **appstream_machine_role** credential profile on the instance. @@ -278 +275 @@ JSON Syntax: -> For more information, see [Using an IAM Role to Grant Permissions to Applications and Scripts Running on AppStream 2.0 Streaming Instances](https://docs.aws.amazon.com/appstream2/latest/developerguide/using-iam-roles-to-grant-permissions-to-applications-scripts-streaming-instances.html) in the _Amazon AppStream 2.0 Administration Guide_ . +> For more information, see [Using an IAM Role to Grant Permissions to Applications and Scripts Running on WorkSpaces Applications Streaming Instances](https://docs.aws.amazon.com/appstream2/latest/developerguide/using-iam-roles-to-grant-permissions-to-applications-scripts-streaming-instances.html) in the _Amazon WorkSpaces Applications Administration Guide_ . @@ -325 +322 @@ JSON Syntax: -> The version of the AppStream 2.0 agent to use for this image builder. To use the latest version of the AppStream 2.0 agent, specify [LATEST]. +> The version of the WorkSpaces Applications agent to use for this image builder. To use the latest version of the WorkSpaces Applications agent, specify [LATEST]. @@ -344 +341 @@ JSON Syntax: -> For more information about tags, see [Tagging Your Resources](https://docs.aws.amazon.com/appstream2/latest/developerguide/tagging-basic.html) in the _Amazon AppStream 2.0 Administration Guide_ . +> For more information about tags, see [Tagging Your Resources](https://docs.aws.amazon.com/appstream2/latest/developerguide/tagging-basic.html) in the _Amazon WorkSpaces Applications Administration Guide_ . @@ -399 +396 @@ JSON Syntax: ->> Describes an interface VPC endpoint (interface endpoint) that lets you create a private connection between the virtual private cloud (VPC) that you specify and AppStream 2.0. When you specify an interface endpoint for a stack, users of the stack can connect to AppStream 2.0 only through that endpoint. When you specify an interface endpoint for an image builder, administrators can connect to the image builder only through that endpoint. +>> Describes an interface VPC endpoint (interface endpoint) that lets you create a private connection between the virtual private cloud (VPC) that you specify and WorkSpaces Applications. When you specify an interface endpoint for a stack, users of the stack can connect to WorkSpaces Applications only through that endpoint. When you specify an interface endpoint for an image builder, administrators can connect to the image builder only through that endpoint. @@ -438,0 +436,22 @@ JSON Syntax: +`--root-volume-config` (structure) + +> The configuration for the root volume of the image builder. Use this to customize storage capacity from 200 GB up to 500 GB based on your application installation requirements. +> +> VolumeSizeInGb -> (integer) +> +>> The size of the root volume in GB. Valid range is 200-500 GB. The default is 200 GB, which is included in the hourly instance rate. Additional storage beyond 200 GB incurs extra charges and applies to instances regardless of their running state. + +Shorthand Syntax: + + + VolumeSizeInGb=integer + + +JSON Syntax: + + + { + "VolumeSizeInGb": integer + } + + @@ -747 +765,0 @@ ImageBuilder -> (structure) ->> * stream.graphics-desktop.2xlarge @@ -754,3 +771,0 @@ ImageBuilder -> (structure) ->> * stream.graphics-pro.4xlarge ->> * stream.graphics-pro.8xlarge ->> * stream.graphics-pro.16xlarge @@ -805 +820 @@ ImageBuilder -> (structure) ->> The ARN of the IAM role that is applied to the image builder. To assume a role, the image builder calls the AWS Security Token Service (STS) `AssumeRole` API operation and passes the ARN of the role to use. The operation creates a new session with temporary credentials. AppStream 2.0 retrieves the temporary credentials and creates the **appstream_machine_role** credential profile on the instance. +>> The ARN of the IAM role that is applied to the image builder. To assume a role, the image builder calls the AWS Security Token Service (STS) `AssumeRole` API operation and passes the ARN of the role to use. The operation creates a new session with temporary credentials. WorkSpaces Applications retrieves the temporary credentials and creates the **appstream_machine_role** credential profile on the instance. @@ -807 +822 @@ ImageBuilder -> (structure) ->> For more information, see [Using an IAM Role to Grant Permissions to Applications and Scripts Running on AppStream 2.0 Streaming Instances](https://docs.aws.amazon.com/appstream2/latest/developerguide/using-iam-roles-to-grant-permissions-to-applications-scripts-streaming-instances.html) in the _Amazon AppStream 2.0 Administration Guide_ . +>> For more information, see [Using an IAM Role to Grant Permissions to Applications and Scripts Running on WorkSpaces Applications Streaming Instances](https://docs.aws.amazon.com/appstream2/latest/developerguide/using-iam-roles-to-grant-permissions-to-applications-scripts-streaming-instances.html) in the _Amazon WorkSpaces Applications Administration Guide_ . @@ -833,0 +849 @@ ImageBuilder -> (structure) +>> * `PENDING_IMAGE_IMPORT` @@ -904 +920 @@ ImageBuilder -> (structure) ->>> The IPv6 addresses of the elastic network interface that is attached to instances in your VPC. +>>> The IPv6 addresses assigned to the elastic network interface. This field supports IPv6 connectivity for WorkSpaces Applications instances. @@ -967,0 +984 @@ ImageBuilder -> (structure) +>>>> * `VALIDATION_ERROR` @@ -987 +1004 @@ ImageBuilder -> (structure) ->> The version of the AppStream 2.0 agent that is currently being used by the image builder. +>> The version of the WorkSpaces Applications agent that is currently being used by the image builder. @@ -1009 +1026 @@ ImageBuilder -> (structure) ->>> Describes an interface VPC endpoint (interface endpoint) that lets you create a private connection between the virtual private cloud (VPC) that you specify and AppStream 2.0. When you specify an interface endpoint for a stack, users of the stack can connect to AppStream 2.0 only through that endpoint. When you specify an interface endpoint for an image builder, administrators can connect to the image builder only through that endpoint. +>>> Describes an interface VPC endpoint (interface endpoint) that lets you create a private connection between the virtual private cloud (VPC) that you specify and WorkSpaces Applications. When you specify an interface endpoint for a stack, users of the stack can connect to WorkSpaces Applications only through that endpoint. When you specify an interface endpoint for an image builder, administrators can connect to the image builder only through that endpoint. @@ -1029,0 +1047,8 @@ ImageBuilder -> (structure) +> +> RootVolumeConfig -> (structure) +> +>> The current configuration of the root volume for the image builder, including the storage size in GB. +>> +>> VolumeSizeInGb -> (integer) +>> +>>> The size of the root volume in GB. Valid range is 200-500 GB. The default is 200 GB, which is included in the hourly instance rate. Additional storage beyond 200 GB incurs extra charges and applies to instances regardless of their running state. @@ -1033 +1058 @@ ImageBuilder -> (structure) ->> Indicates whether the image builder is using the latest AppStream 2.0 agent version or not. +>> Indicates whether the image builder is using the latest WorkSpaces Applications agent version or not. @@ -1052 +1077 @@ ImageBuilder -> (structure) - * [AWS CLI 2.31.37 Command Reference](../../index.html) » + * [AWS CLI 2.31.39 Command Reference](../../index.html) »