AWS AWSEC2 documentation change
Summary
Added IAM permission requirements for AMI creation and updated snapshot filename reference
Security assessment
Documents required permissions for operational tasks without addressing vulnerabilities or security features
Diff
diff --git a/AWSEC2/latest/UserGuide/build-sample-ami.md b/AWSEC2/latest/UserGuide/build-sample-ami.md index a46d4e56d..b9f9c9bca 100644 --- a//AWSEC2/latest/UserGuide/build-sample-ami.md +++ b//AWSEC2/latest/UserGuide/build-sample-ami.md @@ -25,0 +26,11 @@ For more information about creating your own image descriptions, see the followi +Prerequisites + +Your IAM identity must have the following permissions to complete this tutorial: + + * `ebs:CompleteSnapshot`, `ebs:StartSnapshot`, and `ebs:PutSnapshotBlock` on `arn:aws:ec2:*::snapshot/*` + + * `ec2:RegisterImage` on all resources + + + + @@ -81 +92 @@ The measurements are provided in the following JSON format: - SNAPSHOT=$(.cargo/bin/coldsnap upload ./image/kiwi*.raw) + SNAPSHOT=$(.cargo/bin/coldsnap upload ./image/al2023*.raw)