AWS cli documentation change

Service: cli · 2026-04-19 · Documentation medium

File: cli/latest/reference/imagebuilder/import-disk-image.md

Summary

Added new parameters --register-image-options and --windows-configuration for Secure Boot/UEFI settings and Windows edition selection during disk image import

Security assessment

This change adds documentation for new security features including Secure Boot configuration and UEFI variable store management, which are security controls for boot process integrity. However, there is no evidence this addresses a specific security vulnerability or incident.

Diff

diff --git a/cli/latest/reference/imagebuilder/import-disk-image.md b/cli/latest/reference/imagebuilder/import-disk-image.md
index 5a2483bef..b2c2214b9 100644
--- a//cli/latest/reference/imagebuilder/import-disk-image.md
+++ b//cli/latest/reference/imagebuilder/import-disk-image.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.29 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.32 Command Reference](../../index.html) »
@@ -80,0 +81,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/imageb
+    [--register-image-options <value>]
+    [--windows-configuration <value>]
@@ -257,0 +260,65 @@ JSON Syntax:
+`--register-image-options` (structure)
+
+> Configures Secure Boot and UEFI settings for the imported image.
+> 
+> secureBootEnabled -> (boolean)
+>
+>> Specifies whether Secure Boot is enabled for the output AMI. The default value is `true` . To disable Secure Boot for custom unsigned drivers, set this value to `false` .
+> 
+> uefiData -> (string)
+>
+>> A Base64-encoded representation of the non-volatile UEFI variable store. You can specify this parameter only when `secureBootEnabled` is `true` or unspecified. You can inspect and modify the UEFI data by using the [python-uefivars tool on GitHub](https://github.com/awslabs/python-uefivars) .
+>> 
+>> For more information, see [UEFI variables for Amazon EC2 instances](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/uefi-variables.html) .
+>> 
+>> Constraints:
+>> 
+>>   * min: `0`
+>>   * max: `64000`
+>> 
+
+
+Shorthand Syntax:
+    
+    
+    secureBootEnabled=boolean,uefiData=string
+    
+
+JSON Syntax:
+    
+    
+    {
+      "secureBootEnabled": true|false,
+      "uefiData": "string"
+    }
+    
+
+`--windows-configuration` (structure)
+
+> Specifies Windows settings for ISO imports.
+> 
+> imageIndex -> (long) [required]
+>
+>> The 1-based index that specifies which Windows edition to install from a multi-edition Windows ISO file. A Windows ISO can contain a `.wim` file with multiple image indexes, each representing a different edition.
+>> 
+>> Constraints:
+>> 
+>>   * min: `1`
+>>   * max: `4294967295`
+>> 
+
+
+Shorthand Syntax:
+    
+    
+    imageIndex=long
+    
+
+JSON Syntax:
+    
+    
+    {
+      "imageIndex": long
+    }
+    
+
@@ -413 +480 @@ imageBuildVersionArn -> (string)
-  * [AWS CLI 2.34.29 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.32 Command Reference](../../index.html) »