AWS Security ChangesHomeSearch

AWS AWSEC2 documentation change

Service: AWSEC2 · 2026-04-04 · Documentation low

File: AWSEC2/latest/UserGuide/enable-capacity-manager-organizations.md

Summary

Added PowerShell examples for enabling, updating, and verifying Capacity Manager with AWS Organizations, including service-linked role creation and access management.

Security assessment

This change adds PowerShell command examples for managing Capacity Manager integration with AWS Organizations. The documentation includes service-linked role creation and access management, but these are routine administrative procedures. No evidence of addressing security vulnerabilities.

Diff

diff --git a/AWSEC2/latest/UserGuide/enable-capacity-manager-organizations.md b/AWSEC2/latest/UserGuide/enable-capacity-manager-organizations.md
index dfa1cc97f..8785f3710 100644
--- a//AWSEC2/latest/UserGuide/enable-capacity-manager-organizations.md
+++ b//AWSEC2/latest/UserGuide/enable-capacity-manager-organizations.md
@@ -93,0 +94,25 @@ To update organization access for an existing Capacity Manager, run the followin
+PowerShell
+    
+
+###### To enable organization access in Capacity Manager
+
+  1. Create a service-linked role using the [New-IAMServiceLinkedRole](https://docs.aws.amazon.com/powershell/latest/reference/items/New-IAMServiceLinkedRole.html) cmdlet.
+    
+        New-IAMServiceLinkedRole -AWSServiceName "ec2.capacitymanager.amazonaws.com"
+
+  2. Enable AWS Organization access using the [Enable-ORGAWSServiceAccess](https://docs.aws.amazon.com/powershell/latest/reference/items/Enable-ORGAWSServiceAccess.html) cmdlet.
+    
+        Enable-ORGAWSServiceAccess -ServicePrincipal "ec2.capacitymanager.amazonaws.com"
+
+  3. Enable Capacity Manager with AWS Organization using the [Enable-EC2CapacityManager](https://docs.aws.amazon.com/powershell/latest/reference/items/Enable-EC2CapacityManager.html) cmdlet.
+    
+        Enable-EC2CapacityManager -OrganizationsAccess $true
+
+
+
+
+To update organization access for an existing Capacity Manager, run the following [Update-EC2CapacityManagerOrganizationsAccess](https://docs.aws.amazon.com/powershell/latest/reference/items/Update-EC2CapacityManagerOrganizationsAccess.html) cmdlet:
+    
+    
+    Update-EC2CapacityManagerOrganizationsAccess -OrganizationsAccess $true
+
@@ -131,0 +157,23 @@ The output should display:
+PowerShell
+    
+
+###### To verify Capacity Manager is enabled with your organization
+
+Use the [Get-EC2CapacityManagerAttribute](https://docs.aws.amazon.com/powershell/latest/reference/items/Get-EC2CapacityManagerAttribute.html) cmdlet.
+    
+    
+    Get-EC2CapacityManagerAttribute
+
+The output should display:
+    
+    
+    CapacityManagerStatus      : enabled
+    DataExportCount            : 0
+    EarliestDatapointTimestamp :
+    IngestionStatus            : initial-ingestion-in-progress
+    IngestionStatusMessage     : Capacity Manager is collecting historical data from
+                                  2026-03-17T16:00:00Z. Data collection is in progress and may take
+                                  several hours to complete.
+    LatestDatapointTimestamp   :
+    OrganizationsAccess        : True
+
@@ -136 +184 @@ The output should display:
-  * **Data aggregation:** After enabling organization access, Capacity Manager will backfill 14 days of historical data from all member accounts. This process typically takes a few minutes to complete.
+  * **Data aggregation:** After enabling organization access, Capacity Manager backfills 14 days of historical data from all member accounts. This process typically takes a few minutes to complete.