AWS Security ChangesHomeSearch

AWS AWSEC2 documentation change

Service: AWSEC2 · 2026-03-07 · Documentation low

File: AWSEC2/latest/UserGuide/build-sample-ami.md

Summary

Added IAM permission requirements for AMI creation and updated snapshot filename reference

Security assessment

Documents required permissions for operational tasks without addressing vulnerabilities or security features

Diff

diff --git a/AWSEC2/latest/UserGuide/build-sample-ami.md b/AWSEC2/latest/UserGuide/build-sample-ami.md
index a46d4e56d..b9f9c9bca 100644
--- a//AWSEC2/latest/UserGuide/build-sample-ami.md
+++ b//AWSEC2/latest/UserGuide/build-sample-ami.md
@@ -25,0 +26,11 @@ For more information about creating your own image descriptions, see the followi
+Prerequisites
+
+Your IAM identity must have the following permissions to complete this tutorial:
+
+  * `ebs:CompleteSnapshot`, `ebs:StartSnapshot`, and `ebs:PutSnapshotBlock` on `arn:aws:ec2:*::snapshot/*`
+
+  * `ec2:RegisterImage` on all resources
+
+
+
+
@@ -81 +92 @@ The measurements are provided in the following JSON format:
-        SNAPSHOT=$(.cargo/bin/coldsnap upload ./image/kiwi*.raw)
+        SNAPSHOT=$(.cargo/bin/coldsnap upload ./image/al2023*.raw)