AWS AWSEC2 documentation change
Summary
Added PowerShell examples for enabling, updating, and verifying Capacity Manager with AWS Organizations, including service-linked role creation and access management.
Security assessment
This change adds PowerShell command examples for managing Capacity Manager integration with AWS Organizations. The documentation includes service-linked role creation and access management, but these are routine administrative procedures. No evidence of addressing security vulnerabilities.
Diff
diff --git a/AWSEC2/latest/UserGuide/enable-capacity-manager-organizations.md b/AWSEC2/latest/UserGuide/enable-capacity-manager-organizations.md index dfa1cc97f..8785f3710 100644 --- a//AWSEC2/latest/UserGuide/enable-capacity-manager-organizations.md +++ b//AWSEC2/latest/UserGuide/enable-capacity-manager-organizations.md @@ -93,0 +94,25 @@ To update organization access for an existing Capacity Manager, run the followin +PowerShell + + +###### To enable organization access in Capacity Manager + + 1. Create a service-linked role using the [New-IAMServiceLinkedRole](https://docs.aws.amazon.com/powershell/latest/reference/items/New-IAMServiceLinkedRole.html) cmdlet. + + New-IAMServiceLinkedRole -AWSServiceName "ec2.capacitymanager.amazonaws.com" + + 2. Enable AWS Organization access using the [Enable-ORGAWSServiceAccess](https://docs.aws.amazon.com/powershell/latest/reference/items/Enable-ORGAWSServiceAccess.html) cmdlet. + + Enable-ORGAWSServiceAccess -ServicePrincipal "ec2.capacitymanager.amazonaws.com" + + 3. Enable Capacity Manager with AWS Organization using the [Enable-EC2CapacityManager](https://docs.aws.amazon.com/powershell/latest/reference/items/Enable-EC2CapacityManager.html) cmdlet. + + Enable-EC2CapacityManager -OrganizationsAccess $true + + + + +To update organization access for an existing Capacity Manager, run the following [Update-EC2CapacityManagerOrganizationsAccess](https://docs.aws.amazon.com/powershell/latest/reference/items/Update-EC2CapacityManagerOrganizationsAccess.html) cmdlet: + + + Update-EC2CapacityManagerOrganizationsAccess -OrganizationsAccess $true + @@ -131,0 +157,23 @@ The output should display: +PowerShell + + +###### To verify Capacity Manager is enabled with your organization + +Use the [Get-EC2CapacityManagerAttribute](https://docs.aws.amazon.com/powershell/latest/reference/items/Get-EC2CapacityManagerAttribute.html) cmdlet. + + + Get-EC2CapacityManagerAttribute + +The output should display: + + + CapacityManagerStatus : enabled + DataExportCount : 0 + EarliestDatapointTimestamp : + IngestionStatus : initial-ingestion-in-progress + IngestionStatusMessage : Capacity Manager is collecting historical data from + 2026-03-17T16:00:00Z. Data collection is in progress and may take + several hours to complete. + LatestDatapointTimestamp : + OrganizationsAccess : True + @@ -136 +184 @@ The output should display: - * **Data aggregation:** After enabling organization access, Capacity Manager will backfill 14 days of historical data from all member accounts. This process typically takes a few minutes to complete. + * **Data aggregation:** After enabling organization access, Capacity Manager backfills 14 days of historical data from all member accounts. This process typically takes a few minutes to complete.