AWS govcloud-us documentation change
Summary
Restructured documentation: updated titles, consolidated unsupported features list, added documentation references section, and rewrote export control content for clarity.
Security assessment
The changes are organizational and clarify existing limitations/documentation. The export control rewrite provides clearer guidance but doesn't address a new vulnerability. No evidence of security incident remediation.
Diff
diff --git a/govcloud-us/latest/UserGuide/govcloud-ec2ib.md b/govcloud-us/latest/UserGuide/govcloud-ec2ib.md index 72ef370f3..c308402a6 100644 --- a//govcloud-us/latest/UserGuide/govcloud-ec2ib.md +++ b//govcloud-us/latest/UserGuide/govcloud-ec2ib.md @@ -7 +7 @@ -How Amazon EC2 Image Builder differs for AWS GovCloud (US)Documentation for Amazon EC2 Image BuilderExport-controlled content +Service differencesDocumentation referencesExport-controlled content @@ -9 +9 @@ How Amazon EC2 Image Builder differs for AWS GovCloud (US)Documentation for Amaz -# Amazon EC2 Image Builder in AWS GovCloud (US) +# Amazon EC2 Image Builder in AWS GovCloud (US) Regions @@ -11 +11 @@ How Amazon EC2 Image Builder differs for AWS GovCloud (US)Documentation for Amaz -Amazon Elastic Compute Cloud Image Builder is a fully managed AWS service that makes it easier to automate the creation, management and deployment of customized, secure and up-to-date “golden” server images that are pre-installed and pre-configured with software and settings to meet specific IT standards. You can use the AWS Management Console, AWS CLI or APIs to create “golden” images in your AWS account. The images you build are created in your account and you can configure them for operating system patches on an ongoing basis. +Amazon EC2 Image Builder (Image Builder) is a fully managed AWS service that makes it easier to automate the creation, management, and deployment of customized, secure, and up-to-date server images that are pre-installed and pre-configured with software and settings to meet specific IT standards. @@ -13 +13 @@ Amazon Elastic Compute Cloud Image Builder is a fully managed AWS service that m -## How Amazon EC2 Image Builder differs for AWS GovCloud (US) +## Service differences @@ -15 +15 @@ Amazon Elastic Compute Cloud Image Builder is a fully managed AWS service that m -The implementation of Amazon EC2 Image Builder is different for AWS GovCloud (US) Regions in the following ways: +The following Image Builder features are not available in AWS GovCloud (US) Regions: @@ -17 +17 @@ The implementation of Amazon EC2 Image Builder is different for AWS GovCloud (US - * Image Builder doesn’t support macOS images. + * ISO disk file import @@ -18,0 +19 @@ The implementation of Amazon EC2 Image Builder is different for AWS GovCloud (US + * macOS images @@ -19,0 +21 @@ The implementation of Amazon EC2 Image Builder is different for AWS GovCloud (US + * AWS Marketplace software components @@ -22 +23,0 @@ The implementation of Amazon EC2 Image Builder is different for AWS GovCloud (US -The following Image Builder features are not supported in AWS GovCloud (US) Regions: @@ -24 +24,0 @@ The following Image Builder features are not supported in AWS GovCloud (US) Regi - * AWS Marketplace Software components @@ -26 +26 @@ The following Image Builder features are not supported in AWS GovCloud (US) Regi - * ISO disk file import +## Documentation references @@ -27,0 +28 @@ The following Image Builder features are not supported in AWS GovCloud (US) Regi + * [EC2 Image Builder User Guide](https://docs.aws.amazon.com/imagebuilder/latest/userguide/) @@ -28,0 +30 @@ The following Image Builder features are not supported in AWS GovCloud (US) Regi + * [EC2 Image Builder AWS CLI Reference](https://docs.aws.amazon.com/cli/latest/reference/imagebuilder/index.html) @@ -29,0 +32 @@ The following Image Builder features are not supported in AWS GovCloud (US) Regi + * [EC2 Image Builder API Reference](https://docs.aws.amazon.com/imagebuilder/latest/APIReference/) @@ -31 +34 @@ The following Image Builder features are not supported in AWS GovCloud (US) Regi -## Documentation for Amazon EC2 Image Builder + * [AWS Developer Tools](./cli-and-api-access.html) @@ -33 +36 @@ The following Image Builder features are not supported in AWS GovCloud (US) Regi -For more information about Amazon EC2 Image Builder, see the [Amazon EC2 Image Builder documentation](https://docs.aws.amazon.com/imagebuilder/latest/userguide). + * [Service endpoints](./using-govcloud-endpoints.html) @@ -35 +37,0 @@ For more information about Amazon EC2 Image Builder, see the [Amazon EC2 Image B -## Export-controlled content @@ -37 +38,0 @@ For more information about Amazon EC2 Image Builder, see the [Amazon EC2 Image B -For AWS Services architected within the AWS GovCloud (US) Regions, the following list explains how certain components of data may leave the AWS GovCloud (US) Regions in the normal course of the service offerings. The list can be used as a guide to help meet applicable customer compliance obligations. Data not included in the following list remains within the AWS GovCloud (US) Regions. @@ -39 +39,0 @@ For AWS Services architected within the AWS GovCloud (US) Regions, the following - * EC2 Image Builder metadata is not permitted to contain export-controlled data. This metadata includes all configuration data that you enter when creating and maintaining your images, components, image recipes, distribution configurations and infrastructure configurations. @@ -41,3 +41 @@ For AWS Services architected within the AWS GovCloud (US) Regions, the following -Do not enter export-controlled data in the following console fields: - - * Names +## Export-controlled content @@ -45 +43 @@ Do not enter export-controlled data in the following console fields: - * Description +For AWS services architected within the AWS GovCloud (US) Region, the following list explains how certain components of data may leave the AWS GovCloud (US) Region in the normal course of the service offerings. The list can be used as a guide to help meet applicable customer compliance obligations. Data not included in the following list remains within the AWS GovCloud (US) Region. @@ -47 +45 @@ Do not enter export-controlled data in the following console fields: - * Resource tags + * This service can generate metadata from customer-defined configurations. AWS suggests customers do not enter export-controlled information in console fields, descriptions, resource names, and tagging information.