AWS res documentation change
Summary
Updated image references, added optional 'Allowed Instance Types' field for software stacks, and improved step-by-step instructions with more detail
Security assessment
The change adds an 'Allowed Instance Types' field that allows administrators to restrict which instance families or types can be used with a software stack. This is a security control feature that helps enforce compliance and prevent unauthorized or non-compliant instance types from being provisioned, but there's no evidence it addresses a specific security vulnerability.
Diff
diff --git a/res/latest/ug/software-stacks.md b/res/latest/ug/software-stacks.md index 91ace3ec0..5528eb0a0 100644 --- a//res/latest/ug/software-stacks.md +++ b//res/latest/ug/software-stacks.md @@ -11 +11 @@ From the Software Stacks page, you can configure Amazon Machine Images (AMIs) or - + @@ -43 +43 @@ The Systems Manager parameter will require the following tags for RES to access - 2. Enter details for the new software stack. + 2. Enter details for the new software stack, including name, description, AMI ID, and operating system. @@ -45 +45,3 @@ The Systems Manager parameter will require the following tags for RES to access - 3. Choose **Submit**. + 3. (Optional) Use the **Allowed Instance Types** field to specify the instance families or types that are permitted for this software stack. You can enter instance families (for example, `t3`) or specific instance sizes (for example, `t3.xlarge`). + + 4. Choose **Submit**. @@ -149 +151 @@ RES does not have a default software stack for Rocky Linux 9, so this section of - 1. Log into the AWS Console, and go to the [AMI Catalog page](https://console.aws.amazon.com/ec2/home#AMICatalog) within the EC2 Console. + 1. Sign in to the AWS Management Console, and go to the [AMI Catalog page](https://console.aws.amazon.com/ec2/home#AMICatalog) within the EC2 Console. @@ -155 +157 @@ RES does not have a default software stack for Rocky Linux 9, so this section of - + @@ -161 +163 @@ RES does not have a default software stack for Rocky Linux 9, so this section of - +