AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-11-19 · Documentation low

File: cli/latest/reference/appstream/start-image-builder.md

Summary

Updated AWS CLI version references, rebranded AppStream 2.0 to WorkSpaces Applications, removed specific instance types, added new states and error types, added root volume configuration details, and updated network interface descriptions.

Security assessment

Changes are primarily rebranding and feature updates. The IAM role description update maintains existing security practices without indicating any vulnerability fix. Added IPv6 documentation enhances connectivity features but doesn't address security flaws.

Diff

diff --git a/cli/latest/reference/appstream/start-image-builder.md b/cli/latest/reference/appstream/start-image-builder.md
index cd693fe90..eefcc9acd 100644
--- a//cli/latest/reference/appstream/start-image-builder.md
+++ b//cli/latest/reference/appstream/start-image-builder.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.37 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.39 Command Reference](../../index.html) »
@@ -105 +105 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/appstr
-> The version of the AppStream 2.0 agent to use for this image builder. To use the latest version of the AppStream 2.0 agent, specify [LATEST].
+> The version of the WorkSpaces Applications agent to use for this image builder. To use the latest version of the WorkSpaces Applications agent, specify [LATEST].
@@ -328 +327,0 @@ ImageBuilder -> (structure)
->>   * stream.graphics-desktop.2xlarge
@@ -335,3 +333,0 @@ ImageBuilder -> (structure)
->>   * stream.graphics-pro.4xlarge
->>   * stream.graphics-pro.8xlarge
->>   * stream.graphics-pro.16xlarge
@@ -386 +382 @@ ImageBuilder -> (structure)
->> The ARN of the IAM role that is applied to the image builder. To assume a role, the image builder calls the AWS Security Token Service (STS) `AssumeRole` API operation and passes the ARN of the role to use. The operation creates a new session with temporary credentials. AppStream 2.0 retrieves the temporary credentials and creates the **appstream_machine_role** credential profile on the instance.
+>> The ARN of the IAM role that is applied to the image builder. To assume a role, the image builder calls the AWS Security Token Service (STS) `AssumeRole` API operation and passes the ARN of the role to use. The operation creates a new session with temporary credentials. WorkSpaces Applications retrieves the temporary credentials and creates the **appstream_machine_role** credential profile on the instance.
@@ -388 +384 @@ ImageBuilder -> (structure)
->> For more information, see [Using an IAM Role to Grant Permissions to Applications and Scripts Running on AppStream 2.0 Streaming Instances](https://docs.aws.amazon.com/appstream2/latest/developerguide/using-iam-roles-to-grant-permissions-to-applications-scripts-streaming-instances.html) in the _Amazon AppStream 2.0 Administration Guide_ .
+>> For more information, see [Using an IAM Role to Grant Permissions to Applications and Scripts Running on WorkSpaces Applications Streaming Instances](https://docs.aws.amazon.com/appstream2/latest/developerguide/using-iam-roles-to-grant-permissions-to-applications-scripts-streaming-instances.html) in the _Amazon WorkSpaces Applications Administration Guide_ .
@@ -414,0 +411 @@ ImageBuilder -> (structure)
+>>   * `PENDING_IMAGE_IMPORT`
@@ -485 +482 @@ ImageBuilder -> (structure)
->>> The IPv6 addresses of the elastic network interface that is attached to instances in your VPC.
+>>> The IPv6 addresses assigned to the elastic network interface. This field supports IPv6 connectivity for WorkSpaces Applications instances.
@@ -548,0 +546 @@ ImageBuilder -> (structure)
+>>>>   * `VALIDATION_ERROR`
@@ -568 +566 @@ ImageBuilder -> (structure)
->> The version of the AppStream 2.0 agent that is currently being used by the image builder.
+>> The version of the WorkSpaces Applications agent that is currently being used by the image builder.
@@ -590 +588 @@ ImageBuilder -> (structure)
->>> Describes an interface VPC endpoint (interface endpoint) that lets you create a private connection between the virtual private cloud (VPC) that you specify and AppStream 2.0. When you specify an interface endpoint for a stack, users of the stack can connect to AppStream 2.0 only through that endpoint. When you specify an interface endpoint for an image builder, administrators can connect to the image builder only through that endpoint.
+>>> Describes an interface VPC endpoint (interface endpoint) that lets you create a private connection between the virtual private cloud (VPC) that you specify and WorkSpaces Applications. When you specify an interface endpoint for a stack, users of the stack can connect to WorkSpaces Applications only through that endpoint. When you specify an interface endpoint for an image builder, administrators can connect to the image builder only through that endpoint.
@@ -610,0 +609,8 @@ ImageBuilder -> (structure)
+> 
+> RootVolumeConfig -> (structure)
+>
+>> The current configuration of the root volume for the image builder, including the storage size in GB.
+>> 
+>> VolumeSizeInGb -> (integer)
+>>
+>>> The size of the root volume in GB. Valid range is 200-500 GB. The default is 200 GB, which is included in the hourly instance rate. Additional storage beyond 200 GB incurs extra charges and applies to instances regardless of their running state.
@@ -614 +620 @@ ImageBuilder -> (structure)
->> Indicates whether the image builder is using the latest AppStream 2.0 agent version or not.
+>> Indicates whether the image builder is using the latest WorkSpaces Applications agent version or not.
@@ -633 +639 @@ ImageBuilder -> (structure)
-  * [AWS CLI 2.31.37 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.39 Command Reference](../../index.html) »