AWS workspaces documentation change
Summary
Updated Linux WorkSpaces smart card documentation to consolidate Ubuntu/RHEL/Rocky Linux under a unified section and mark Amazon Linux 2 as deprecated with end-of-life notice.
Security assessment
Changes are administrative updates about OS support lifecycle and documentation structure. No security vulnerabilities, configurations, or mitigations are mentioned. The core smart card authentication mechanism remains unchanged.
Diff
diff --git a/workspaces/latest/adminguide/smart-cards.md b/workspaces/latest/adminguide/smart-cards.md index 0bcc50d45..6376951ec 100644 --- a//workspaces/latest/adminguide/smart-cards.md +++ b//workspaces/latest/adminguide/smart-cards.md @@ -7 +7 @@ -RequirementsLimitationsDirectory configurationEnable smart cards for Windows WorkSpacesEnable smart cards for Ubuntu, Rocky Linux, and Red Hat Enterprise Linux WorkSpacesEnable smart cards for Amazon Linux 2 WorkSpaces +RequirementsLimitationsDirectory configurationEnable smart cards for Windows WorkSpacesEnable smart cards for Linux WorkSpacesEnable smart cards for Amazon Linux 2 WorkSpaces (deprecated) @@ -27 +27 @@ For example, users can use smart cards for in-session authentication while worki - * Enable smart cards for Ubuntu, Rocky Linux, and Red Hat Enterprise Linux WorkSpaces + * Enable smart cards for Linux WorkSpaces @@ -29 +29 @@ For example, users can use smart cards for in-session authentication while worki - * Enable smart cards for Amazon Linux 2 WorkSpaces + * Enable smart cards for Amazon Linux 2 WorkSpaces (deprecated) @@ -207 +207 @@ The tools for managing the certificates and keys on the smart card (such as remo -## Enable smart cards for Ubuntu, Rocky Linux, and Red Hat Enterprise Linux WorkSpaces +## Enable smart cards for Linux WorkSpaces @@ -209 +209,3 @@ The tools for managing the certificates and keys on the smart card (such as remo -To enable the use of smart cards on Ubuntu, Rocky Linux, and Red Hat Enterprise Linux WorkSpaces, you need to include the root and all intermediate CA certificates in the WorkSpace image for all CAs issuing smart cards, and for all CAs issuing domain controller certificates. +All Linux WorkSpaces use SSSD for Active Directory integration and share the same smart card authentication implementation based on PKINIT and OpenSC. + +To enable the use of smart cards on Linux WorkSpaces, you need to include the root and all intermediate CA certificates in the WorkSpace image for all CAs issuing smart cards, and for all CAs issuing domain controller certificates. @@ -376 +378,5 @@ The tools for managing the certificates and keys on the smart card (such as remo -## Enable smart cards for Amazon Linux 2 WorkSpaces +## Enable smart cards for Amazon Linux 2 WorkSpaces (deprecated) + +###### Important + +Amazon Linux 2 reaches end-of-life on June 30, 2026. This section applies only to legacy Amazon Linux 2 WorkSpaces. For current Linux WorkSpaces, see Enable smart cards for Linux WorkSpaces.