AWS prescriptive-guidance high security documentation change

Service: prescriptive-guidance · 2025-11-22 · Security-related high

File: prescriptive-guidance/latest/optimize-costs-microsoft-workloads/rightsize.md

Summary

Modified ComputeOptimize.yml URL to include AWS signature parameters (Key-Pair-Id, Policy, Signature)

Security assessment

The new URL includes embedded AWS security credentials (signature and policy parameters). Publicly exposing such credentials in documentation could enable unauthorized access to restricted resources if the credentials are not properly scoped or temporary. This introduces a potential security risk.

Diff

diff --git a/prescriptive-guidance/latest/optimize-costs-microsoft-workloads/rightsize.md b/prescriptive-guidance/latest/optimize-costs-microsoft-workloads/rightsize.md
index d0f1045f1..c89deb2b4 100644
--- a//prescriptive-guidance/latest/optimize-costs-microsoft-workloads/rightsize.md
+++ b//prescriptive-guidance/latest/optimize-costs-microsoft-workloads/rightsize.md
@@ -88 +88 @@ To pass memory metrics from Windows EC2 instances to Compute Optimizer, you must
-Download the [ComputeOptimize.yml](https://static.us-east-1.prod.workshops.aws/public/4dbf46fb-02d4-4ab4-8d72-216e944f7ad1/static/code/wec2/ComputeOptimize.yml) file. You can use this file to enable memory collection for all instances in your account. The template file generates the following components:
+Download the [ComputeOptimize.yml](https://static.us-east-1.prod.workshops.aws/93110159-2ede-4c0c-9767-877c96d68a7e/static/code/wec2/ComputeOptimize.yml?Key-Pair-Id=K36Q2WVO3JP7QD&Policy=eyJTdGF0ZW1lbnQiOlt7IlJlc291cmNlIjoiaHR0cHM6Ly9zdGF0aWMudXMtZWFzdC0xLnByb2Qud29ya3Nob3BzLmF3cy85MzExMDE1OS0yZWRlLTRjMGMtOTc2Ny04NzdjOTZkNjhhN2UvKiIsIkNvbmRpdGlvbiI6eyJEYXRlTGVzc1RoYW4iOnsiQVdTOkVwb2NoVGltZSI6MTc2NDI1MjEwMH19fV19&Signature=iPsCfLvEgU87eA-8Au5YoCpdt5qESyaLjJwezZjviyItH0QXx%7EW2ByYsK8pnpXBgawGzB4t1RYiqNcpJP60jneUNOFN7NT-UU8sZ6hsqq9vImCiykxI-ScCPYv3oLA%7ECLxPVwvCdayEeA0vfD1riMmZQqz5i7%7ESqaNBn5%7Ewm03stk-iSZpzZJy-avqaNXpZ57up9F2gWh6%7E221GQs2Cm5Xnn-CHdblKJ7sxgjAu5knosDER8aXHLwAvQQNrS97W1Wpx1YV%7Eg2UcED5RiL45VQ3ocHcza2ueSDrk7DP5badsOh7KaOzFOxsIO6QbRWf7uDkJQPbIgFG5OvSnAYVeHeg__) file. You can use this file to enable memory collection for all instances in your account. The template file generates the following components: