AWS res high security documentation change
Summary
Added multiple new troubleshooting entries including known issues like CVE-2024-6387 (RegreSSHion) vulnerability, certificate expiration, and other operational failures.
Security assessment
Explicitly documents CVE-2024-6387 security vulnerability in RHEL9/Ubuntu VDIs (concrete evidence). Also adds security-adjacent documentation for certificate expiration issues. Directly addresses security weaknesses.
Diff
diff --git a/res/archive/release-minus-3/ug/troubleshooting.md b/res/archive/release-minus-3/ug/troubleshooting.md index 56f0a321f..444cd670d 100644 --- a//res/archive/release-minus-3/ug/troubleshooting.md +++ b//res/archive/release-minus-3/ug/troubleshooting.md @@ -25,0 +26,2 @@ Detailed contents: + * [Where to find environment variables](./res-troubleshooting-general.html#res-troubleshooting-general-info-env-vars) + @@ -105,0 +108,4 @@ Detailed contents: + * [Login account for Windows Virtual Desktop is set to Administrator](./res-troubleshooting-issue-runbooks.html#res-troubleshooting-virtual-desktops-windows-admin) + + * [Certificate expires when using external resource CertificateRenewalNode](./res-troubleshooting-issue-runbooks.html#res-troubleshooting-virtual-desktops-certificate-expires) + @@ -155,0 +162,12 @@ Detailed contents: + * [(2024.12 and 2024.12.01) Regex failure when registering a new Cognito user ](./res-troubleshooting-known-issues.html#res-troubleshooting-known-issues-2024x-regex-failure-cognito) + + * [(2024.12.01 and earlier) Invalid bad cert error when connecting to VDI using a custom domain ](./res-troubleshooting-known-issues.html#res-troubleshooting-known-issues-2024x-invalid-bad-cert) + + * [(2024.12 and 2024.12.01) Active Directory users cannot SSH to Bastion Host ](./res-troubleshooting-known-issues.html#res-troubleshooting-known-issues-2024x-ad-users-cannot-ssh) + + * [(2024.10) VDI auto stop broken for RES environments deployed in isolated VPCs ](./res-troubleshooting-known-issues.html#res-troubleshooting-known-issues-2024x-vdi-auto-stop-broken) + + * [(2024.10 and earlier) Failure to launch VDI for Graphic enhanced instance types ](./res-troubleshooting-known-issues.html#res-troubleshooting-known-issues-2024x-fail-to-launch-vdi) + + * [(2024.08) Preparing Infrastructure AMI Failure](./res-troubleshooting-known-issues.html#res-troubleshooting-known-issues-2024x-prep-infra-ami-fail) + @@ -159,0 +178,4 @@ Detailed contents: + * [(2024.06 and earlier) Group members not synced to RES during AD sync ](./res-troubleshooting-known-issues.html#res-troubleshooting-known-issues-2024x-group-not-synced) + + * [(2024.06 and earlier) CVE-2024-6387, RegreSSHion, Security Vulnerability in RHEL9 and Ubuntu VDIs ](./res-troubleshooting-known-issues.html#res-troubleshooting-known-issues-2024x-regresshion) + @@ -172,4 +193,0 @@ Detailed contents: - * [(2024.06 and earlier) Group members not synced to RES during AD sync ](./res-troubleshooting-known-issues.html#res-troubleshooting-known-issues-2024x-group-not-synced) - - * [(2024.06 and earlier) CVE-2024-6387, RegreSSHion, Security Vulnerability in RHEL9 and Ubuntu VDIs ](./res-troubleshooting-known-issues.html#res-troubleshooting-known-issues-2024x-regresshion) -