AWS Security ChangesHomeSearch

AWS res documentation change

Service: res · 2026-03-28 · Documentation low

File: res/latest/ug/software-stacks.md

Summary

Updated image references, added optional 'Allowed Instance Types' field for software stacks, and improved step-by-step instructions with more detail

Security assessment

The change adds an 'Allowed Instance Types' field that allows administrators to restrict which instance families or types can be used with a software stack. This is a security control feature that helps enforce compliance and prevent unauthorized or non-compliant instance types from being provisioned, but there's no evidence it addresses a specific security vulnerability.

Diff

diff --git a/res/latest/ug/software-stacks.md b/res/latest/ug/software-stacks.md
index 91ace3ec0..5528eb0a0 100644
--- a//res/latest/ug/software-stacks.md
+++ b//res/latest/ug/software-stacks.md
@@ -11 +11 @@ From the Software Stacks page, you can configure Amazon Machine Images (AMIs) or
-![Software stacks admin console page with numbered annotations](/images/res/latest/ug/images/res-softwarestackspage.png)
+![Software stacks admin console page with numbered annotations](/images/res/latest/ug/images/res-softwarestackspage-2026.03.png)
@@ -43 +43 @@ The Systems Manager parameter will require the following tags for RES to access
-  2. Enter details for the new software stack.
+  2. Enter details for the new software stack, including name, description, AMI ID, and operating system.
@@ -45 +45,3 @@ The Systems Manager parameter will require the following tags for RES to access
-  3. Choose **Submit**. 
+  3. (Optional) Use the **Allowed Instance Types** field to specify the instance families or types that are permitted for this software stack. You can enter instance families (for example, `t3`) or specific instance sizes (for example, `t3.xlarge`).
+
+  4. Choose **Submit**. 
@@ -149 +151 @@ RES does not have a default software stack for Rocky Linux 9, so this section of
-  1. Log into the AWS Console, and go to the [AMI Catalog page](https://console.aws.amazon.com/ec2/home#AMICatalog) within the EC2 Console.
+  1. Sign in to the AWS Management Console, and go to the [AMI Catalog page](https://console.aws.amazon.com/ec2/home#AMICatalog) within the EC2 Console.
@@ -155 +157 @@ RES does not have a default software stack for Rocky Linux 9, so this section of
-![Rocky Linux 9 AMI details showing version, rating, and description of the OS.](/images/res/latest/ug/images/res-rocky-linux9.png)
+![Screenshot showing Rocky Linux 9 AMI search results in the AMI Catalog](/images/res/latest/ug/images/res-rocky-linux9.png)
@@ -161 +163 @@ RES does not have a default software stack for Rocky Linux 9, so this section of
-![AMI catalog interface showing selected AMI and options to create template or launch instance.](/images/res/latest/ug/images/res-ami-catalog.png)
+![Screenshot showing the AMI Catalog with the selected AMI ID](/images/res/latest/ug/images/res-ami-catalog.png)