AWS AWSCloudFormation documentation change
Summary
Updated documentation for AWS::AppStream::ImageBuilder resource with product name changes from 'AppStream 2.0' to 'WorkSpaces Applications', added new properties (RootVolumeConfig, SoftwaresToInstall, SoftwaresToUninstall) for image builder configuration, and updated IAM role documentation references.
Security assessment
The changes primarily involve product rebranding (AppStream 2.0 to WorkSpaces Applications) and adding new configuration properties for image builders. There is no evidence of security vulnerability fixes, patches, or incident responses. The IAM role documentation update only changes product references without altering security guidance. The new properties (RootVolumeConfig, SoftwaresToInstall, SoftwaresToUninstall) are feature enhancements for managing image builder configurations, not security fixes.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-imagebuilder.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-imagebuilder.md index bc06ad1f9..cad9465ef 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-imagebuilder.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-appstream-imagebuilder.md @@ -9 +9 @@ This is the new _CloudFormation Template Reference Guide_. Please update your bo -The `AWS::AppStream::ImageBuilder` resource creates an image builder for Amazon AppStream 2.0. An image builder is a virtual machine that is used to create an image. +The `AWS::AppStream::ImageBuilder` resource creates an image builder for Amazon WorkSpaces Applications. An image builder is a virtual machine that is used to create an image. @@ -33,0 +34,3 @@ To declare this entity in your CloudFormation template, use the following syntax + "RootVolumeConfig" : [VolumeConfig](./aws-properties-appstream-imagebuilder-volumeconfig.html), + "SoftwaresToInstall" : [ String, ... ], + "SoftwaresToUninstall" : [ String, ... ], @@ -57,0 +61,6 @@ To declare this entity in your CloudFormation template, use the following syntax + RootVolumeConfig: + [VolumeConfig](./aws-properties-appstream-imagebuilder-volumeconfig.html) + SoftwaresToInstall: + - String + SoftwaresToUninstall: + - String @@ -147 +156 @@ _Required_ : No -The ARN of the IAM role that is applied to the image builder. To assume a role, the image builder calls the AWS Security Token Service`AssumeRole` API operation and passes the ARN of the role to use. The operation creates a new session with temporary credentials. AppStream 2.0 retrieves the temporary credentials and creates the **appstream_machine_role** credential profile on the instance. +The ARN of the IAM role that is applied to the image builder. To assume a role, the image builder calls the AWS Security Token Service`AssumeRole` API operation and passes the ARN of the role to use. The operation creates a new session with temporary credentials. WorkSpaces Applications retrieves the temporary credentials and creates the **appstream_machine_role** credential profile on the instance. @@ -149 +158 @@ The ARN of the IAM role that is applied to the image builder. To assume a role, -For more information, see [Using an IAM Role to Grant Permissions to Applications and Scripts Running on AppStream 2.0 Streaming Instances](https://docs.aws.amazon.com/appstream2/latest/developerguide/using-iam-roles-to-grant-permissions-to-applications-scripts-streaming-instances.html) in the _Amazon AppStream 2.0 Administration Guide_. +For more information, see [Using an IAM Role to Grant Permissions to Applications and Scripts Running on WorkSpaces Applications Streaming Instances](https://docs.aws.amazon.com/appstream2/latest/developerguide/using-iam-roles-to-grant-permissions-to-applications-scripts-streaming-instances.html) in the _Amazon WorkSpaces Applications Administration Guide_. @@ -311,0 +321,139 @@ _Required_ : Yes +_Update requires_ : [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) + +`RootVolumeConfig` + + +The current configuration of the root volume for the image builder, including the storage size in GB. + +_Required_ : No + + _Type_ : [VolumeConfig](./aws-properties-appstream-imagebuilder-volumeconfig.html) + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) + +`SoftwaresToInstall` + + +The list of license included applications to install on the image builder during creation. + +Possible values include the following: + + * Microsoft_Office_2021_LTSC_Professional_Plus_32Bit + + * Microsoft_Office_2021_LTSC_Professional_Plus_64Bit + + * Microsoft_Office_2024_LTSC_Professional_Plus_32Bit + + * Microsoft_Office_2024_LTSC_Professional_Plus_64Bit + + * Microsoft_Visio_2021_LTSC_Professional_32Bit + + * Microsoft_Visio_2021_LTSC_Professional_64Bit + + * Microsoft_Visio_2024_LTSC_Professional_32Bit + + * Microsoft_Visio_2024_LTSC_Professional_64Bit + + * Microsoft_Project_2021_Professional_32Bit + + * Microsoft_Project_2021_Professional_64Bit + + * Microsoft_Project_2024_Professional_32Bit + + * Microsoft_Project_2024_Professional_64Bit + + * Microsoft_Office_2021_LTSC_Standard_32Bit + + * Microsoft_Office_2021_LTSC_Standard_64Bit + + * Microsoft_Office_2024_LTSC_Standard_32Bit + + * Microsoft_Office_2024_LTSC_Standard_64Bit + + * Microsoft_Visio_2021_LTSC_Standard_32Bit + + * Microsoft_Visio_2021_LTSC_Standard_64Bit + + * Microsoft_Visio_2024_LTSC_Standard_32Bit + + * Microsoft_Visio_2024_LTSC_Standard_64Bit + + * Microsoft_Project_2021_Standard_32Bit + + * Microsoft_Project_2021_Standard_64Bit + + * Microsoft_Project_2024_Standard_32Bit + + * Microsoft_Project_2024_Standard_64Bit + + + + +_Required_ : No + + _Type_ : Array of String + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) + +`SoftwaresToUninstall` + + +The list of license included applications to uninstall from the image builder during creation. + +Possible values include the following: + + * Microsoft_Office_2021_LTSC_Professional_Plus_32Bit + + * Microsoft_Office_2021_LTSC_Professional_Plus_64Bit + + * Microsoft_Office_2024_LTSC_Professional_Plus_32Bit + + * Microsoft_Office_2024_LTSC_Professional_Plus_64Bit + + * Microsoft_Visio_2021_LTSC_Professional_32Bit + + * Microsoft_Visio_2021_LTSC_Professional_64Bit + + * Microsoft_Visio_2024_LTSC_Professional_32Bit + + * Microsoft_Visio_2024_LTSC_Professional_64Bit + + * Microsoft_Project_2021_Professional_32Bit + + * Microsoft_Project_2021_Professional_64Bit + + * Microsoft_Project_2024_Professional_32Bit + + * Microsoft_Project_2024_Professional_64Bit + + * Microsoft_Office_2021_LTSC_Standard_32Bit + + * Microsoft_Office_2021_LTSC_Standard_64Bit + + * Microsoft_Office_2024_LTSC_Standard_32Bit + + * Microsoft_Office_2024_LTSC_Standard_64Bit + + * Microsoft_Visio_2021_LTSC_Standard_32Bit + + * Microsoft_Visio_2021_LTSC_Standard_64Bit + + * Microsoft_Visio_2024_LTSC_Standard_32Bit + + * Microsoft_Visio_2024_LTSC_Standard_64Bit + + * Microsoft_Project_2021_Standard_32Bit + + * Microsoft_Project_2021_Standard_64Bit + + * Microsoft_Project_2024_Standard_32Bit + + * Microsoft_Project_2024_Standard_64Bit + + + + +_Required_ : No + + _Type_ : Array of String + @@ -355 +503 @@ The URL to start an image builder streaming session, returned as a string. - * [CreateImageBuilder](https://docs.aws.amazon.com/appstream2/latest/APIReference/API_CreateImageBuilder.html) in the _Amazon AppStream 2.0 API Reference_ + * [CreateImageBuilder](https://docs.aws.amazon.com/appstream2/latest/APIReference/API_CreateImageBuilder.html) in the _Amazon WorkSpaces Applications API Reference_