AWS res medium security documentation change
Summary
Added December 2025 release notes with enhancements, changes, and bug fixes including security-related items like S3 bucket access logging, SSL/TLS encryption, and permission fixes.
Security assessment
The release notes document multiple security fixes: 'Fixed issue where users could manually bypass the allowed instance types' (security bypass vulnerability), 'Updated permissions of /opt/cognito_auth directory to root-only access' (permission hardening), and 'Resolved users being able to see other users desktop sessions' (information disclosure). These indicate specific security vulnerabilities were addressed.
Diff
diff --git a/res/archive/release-minus-1/ug/revisions.md b/res/archive/release-minus-1/ug/revisions.md index db841b5e5..1249113ab 100644 --- a//res/archive/release-minus-1/ug/revisions.md +++ b//res/archive/release-minus-1/ug/revisions.md @@ -10,0 +11,24 @@ Date | Change +December 2025 | + + * Release version 2025.12 Enhancements + * Propagation of custom CloudFormation tags to all RES components during deployment. + * Allow administrators to disable Active Directory joining for Windows hosts. + * Enable administrators to set default schedules for VDI desktop instances. + * S3 bucket access logging enabled for compliance and audit requirements. + * SSL/TLS encryption required on all S3 bucket communications. + * Enabled point-in-time recovery for RES managed DynamoDB tables. + * Updated permissions of /opt/cognito_auth directory to root-only access. +Changes + * Migrated VDC-related APIs out of the VDC EC2 host to the backend Lambda. +Bug Fixes + * Refreshing Allowed Instance Types when launching a new VDI. + * Fixed missing dependencies for efs_utils. + * Fixed cost dashboard total number of sessions in RES portal. + * Fixed issue where users could manually bypass the allowed instance types. + * Addressed race condition that could block DCV connection for Linux VDIs. + * Added missing operating systems from Software Stack page OS drop-down menu. + * Fixed frequent logout issue when using custom domain with Chrome. + * Fixed issue where the runtime SSSD configurations are not applied after disabling AD join. + * Fixed RES environment deletion failure caused by remaining VDI role. + + @@ -14,3 +38,14 @@ September 2025 | - * Changes - * Bug Fixes - * + * Region support expansion for ap-northeast-3, ap-southeast-3, me-central-1, and sa-east-1. + * Deletion of computer account from AD domain on VDI termination. + * Systems Manager Parameter Alias support for AMI IDs to simplify the management of project-specific images. + * Integration with pre-existing Amazon Cognito pool for streamlined authentication setup during deployment. + * Customization of CIDR ranges in the CloudFormation external resources template during deployment for enhanced network planning and integration with existing resources. + * Addition of AD email sync functionality after initialization. + * Support for Amazon EC2 g6f instances. +Changes + * Moving infrastructure deployment out of ECS installer task to simplify installation process. +Bug Fixes + * Resolved persistent instance resume failures. + * Resolved users being able to see other users desktop sessions. + * Resolved IAM user role name uniqueness issue in multi-region single account deployments. + @@ -121,0 +157,2 @@ Notices +Archive +