AWS Security ChangesHomeSearch

AWS managedservices documentation change

Service: managedservices · 2026-05-16 · Documentation low

File: managedservices/latest/onboardingguide/bastion-options.md

Summary

Updated image descriptions for SSH tunneling architecture and PuTTY configuration windows to provide more technical detail about the connections and settings.

Security assessment

Changes only improve clarity of existing security architecture diagrams without modifying security recommendations or addressing vulnerabilities. Shows successful SSH connection instead of error but doesn't change security posture.

Diff

diff --git a/managedservices/latest/onboardingguide/bastion-options.md b/managedservices/latest/onboardingguide/bastion-options.md
index ff58fb0ae..a3052dfe2 100644
--- a//managedservices/latest/onboardingguide/bastion-options.md
+++ b//managedservices/latest/onboardingguide/bastion-options.md
@@ -21 +21 @@ AMS would provide additional notes and instructions.
-![SSH tunneling diagram showing remote user connection through firewall to SSH server and RDP client.](/images/managedservices/latest/onboardingguide/images/SSH_Tunneling_Bastion_Generic.png)
+![SSH tunneling architecture showing remote user connecting through firewall to SSH server, then to RDP client, with AWS subnets containing bastion and application servers.](/images/managedservices/latest/onboardingguide/images/SSH_Tunneling_Bastion_Generic.png)
@@ -32 +32 @@ Within PuTTY, you would create an SSH session, with the public IP of the bastion
-![PuTTY Configuration window showing session settings with SSH connection type selected.](/images/managedservices/latest/onboardingguide/images/sshBastionPutty.png)
+![PuTTY Configuration window showing Session category with host name and port fields.](/images/managedservices/latest/onboardingguide/images/sshBastionPutty.png)
@@ -36 +36 @@ Within PuTTY, you would create an SSH session, with the public IP of the bastion
-![PuTTY Configuration window showing SSH authentication options and private key file selection.](/images/managedservices/latest/onboardingguide/images/sshBastionPutty2.png)
+![PuTTY Configuration window showing SSH Auth section with private key file path field.](/images/managedservices/latest/onboardingguide/images/sshBastionPutty2.png)
@@ -40 +40 @@ Within PuTTY, you would create an SSH session, with the public IP of the bastion
-![PuTTY Configuration window showing SSH port forwarding options with a forwarded port example.](/images/managedservices/latest/onboardingguide/images/sshBastionPutty3.png)
+![PuTTY Configuration window showing SSH port forwarding setup with source port 5000 to destination 10.0.101.51:3389.](/images/managedservices/latest/onboardingguide/images/sshBastionPutty3.png)
@@ -44 +44 @@ Within PuTTY, you would create an SSH session, with the public IP of the bastion
-![PuTTY terminal window showing an error message about an unusable SSH key file.](/images/managedservices/latest/onboardingguide/images/sshBastionConnect.png)
+![PuTTY terminal window showing successful SSH connection to the bastion host with login prompt.](/images/managedservices/latest/onboardingguide/images/sshBastionConnect.png)
@@ -48 +48 @@ Within PuTTY, you would create an SSH session, with the public IP of the bastion
-![Remote Desktop Connection dialog with computer field set to localhost:5000.](/images/managedservices/latest/onboardingguide/images/sshBastionConnect2.png)
+![Remote Desktop Connection dialog with localhost:5000 in the Computer field and Connect button.](/images/managedservices/latest/onboardingguide/images/sshBastionConnect2.png)