AWS security-ir documentation change
Summary
Updated document history to record the addition of EC2 Triage feature documentation and CloudFormation StackSets template updates.
Security assessment
This is a routine documentation update tracking changes to the user guide. It records the addition of new security investigation features but does not itself address a security issue or add security documentation.
Diff
diff --git a/security-ir/latest/userguide/document-history-for-the-aws-security-incident-response-user-guide.md b/security-ir/latest/userguide/document-history-for-the-aws-security-incident-response-user-guide.md index e42877011..9d8548119 100644 --- a//security-ir/latest/userguide/document-history-for-the-aws-security-incident-response-user-guide.md +++ b//security-ir/latest/userguide/document-history-for-the-aws-security-incident-response-user-guide.md @@ -12,0 +13,2 @@ Change| Description| Date +[EC2 Triage feature for AWS Security Incident Response](https://docs.aws.amazon.com/security-ir/latest/userguide/detect-and-analyze.html)| Added EC2 Triage capability that enables AWS Security Incident Response to collect investigative information from Amazon Elastic Compute Cloud instances using AWS Systems Manager Run Command during security investigations. Updated Detect and Analyze page to document EC2 Triage prerequisites and capabilities.| April 20, 2026 +[EC2 Triage feature for AWS Security Incident Response](https://docs.aws.amazon.com/security-ir/latest/userguide/working-with-stacksets.html)| Updated CloudFormation StackSets documentation to provide two template options: Containment only and Containment with EC2 Triage. The Containment with EC2 Triage template includes additional permissions for investigative data collection from Amazon EC2 instances.| April 20, 2026