AWS res high security documentation change
Summary
Added September 2025 release notes including security-related bug fixes for session isolation and IAM role naming
Security assessment
The release notes explicitly mention security fixes: 'Resolved users being able to see other users desktop sessions' (session isolation vulnerability) and 'Resolved IAM user role name uniqueness issue' (potential privilege escalation or misconfiguration). These are concrete security issues that have been addressed.
Diff
diff --git a/res/archive/release-minus-2/ug/revisions.md b/res/archive/release-minus-2/ug/revisions.md index d680dd378..8830c47dd 100644 --- a//res/archive/release-minus-2/ug/revisions.md +++ b//res/archive/release-minus-2/ug/revisions.md @@ -10,0 +11,18 @@ Date | Change +September 2025 | + + * Release version 2025.09 Enhancements + * Region support expansion for ap-northeast-3, ap-southeast-3, me-central-1, and sa-east-1. + * Deletion of computer account from AD domain on VDI termination. + * Systems Manager Parameter Alias support for AMI IDs to simplify the management of project-specific images. + * Integration with pre-existing Amazon Cognito pool for streamlined authentication setup during deployment. + * Customization of CIDR ranges in the CloudFormation external resources template during deployment for enhanced network planning and integration with existing resources. + * Addition of AD email sync functionality after initialization. + * Support for Amazon EC2 g6f instances. +Changes + * Moving infrastructure deployment out of ECS installer task to simplify installation process. +Bug Fixes + * Resolved persistent instance resume failures. + * Resolved users being able to see other users desktop sessions. + * Resolved IAM user role name uniqueness issue in multi-region single account deployments. + +