AWS solutions medium security documentation change
Summary
Changed default Auto-Update Container Image parameter from Yes to No; Added new 'Deploy Optional MCP Server' parameter; Updated data collection language from 'anonymized operational metrics' to 'data collection metrics'; Removed opt-out instructions
Security assessment
Changing the default Auto-Update Container Image parameter to 'No' reduces automatic security updates for container images. The parameter description explicitly mentions security implications ('most up to date and secure image'), making this a security-related configuration change that could leave users vulnerable if not manually updated.
Diff
diff --git a/solutions/latest/distributed-load-testing-on-aws/launch-the-stack.md b/solutions/latest/distributed-load-testing-on-aws/launch-the-stack.md index fd848139d..d6c0c1cbe 100644 --- a//solutions/latest/distributed-load-testing-on-aws/launch-the-stack.md +++ b//solutions/latest/distributed-load-testing-on-aws/launch-the-stack.md @@ -7 +7 @@ -###### Important +Follow these steps to deploy the Distributed Load Testing on AWS solution into your account. @@ -9,9 +9 @@ -If you are updating the stack from a version prior to v3.2.6 to the latest version, read [this section](https://docs.aws.amazon.com/solutions/latest/distributed-load-testing-on-aws/updating-from-older-versions.html) before updating the stack. - -Before you launch the automated deployment, review the architecture and other considerations discussed in this guide. Follow the step-by-step instructions in this section to configure and deploy Distributed Load Testing on AWS into your account. - -**Time to deploy:** Approximately 15 minutes - -###### Important - -This solution includes an option to send anonymized operational metrics to AWS. We use this data to better understand how customers use this solution and related services and products. AWS owns the data gathered through this survey. Data collection is subject to the [AWS Privacy Notice](https://aws.amazon.com/privacy/). +###### Note @@ -19 +11 @@ This solution includes an option to send anonymized operational metrics to AWS. -To opt out of this feature, download the template, modify the AWS CloudFormation mapping section, and then use the AWS CloudFormation console to upload your updated template and deploy the solution. For more information, see the [Anonymized data collection](./reference.html#anonymized-data-collection) section of this guide. +This solution includes data collection metrics to AWS. We use this data to better understand how customers use this solution and related services and products. AWS owns the data gathered through this survey. Data collection is subject to the [AWS Privacy Notice](https://aws.amazon.com/privacy/). @@ -27 +19 @@ You are responsible for the cost of the AWS services used while running this sol - 1. Sign in to the AWS Management Console and select the button below to launch the distributed-load-testing-on-aws AWS CloudFormation template. + 1. Sign in to the AWS Management Console and select the button to launch the CloudFormation template. @@ -31 +23 @@ You are responsible for the cost of the AWS services used while running this sol -Alternatively, you can also [download the template](https://solutions-reference.s3.amazonaws.com/distributed-load-testing-on-aws/latest/distributed-load-testing-on-aws.template) as a starting point for your own implementation. +Alternatively, you can [download the template](https://solutions-reference.s3.amazonaws.com/distributed-load-testing-on-aws/latest/distributed-load-testing-on-aws.template) as a starting point for your own implementation. @@ -56 +48,2 @@ Parameter | Default | Description -**Auto-Update Container Image** | `Yes` | Automatically use the most up to date and secure image up until the next minor release. Selecting `No` will pull the image as originally released, without any security updates. +**Auto-Update Container Image** | `No` | Automatically use the most up to date and secure image up until the next minor release. Selecting `No` will pull the image as originally released, without any security updates. +**Deploy Optional MCP Server** | `No` | Deploy the optional remote MCP server, using AgentCore Gateway to connect AI applications to Distributed Load Testing on AWS.