AWS config medium security documentation change
Summary
Clarified EC2 key pair rule scope and added launch-time configuration evaluation note
Security assessment
The documentation now explicitly warns that key pair usage makes instances non-compliant and clarifies evaluation is launch-time only. This addresses credential security risks by emphasizing key pairs as non-compliant and defining assessment boundaries.
Diff
diff --git a/config/latest/developerguide/ec2-no-amazon-key-pair.md b/config/latest/developerguide/ec2-no-amazon-key-pair.md index e5c7469c8..492008848 100644 --- a//config/latest/developerguide/ec2-no-amazon-key-pair.md +++ b//config/latest/developerguide/ec2-no-amazon-key-pair.md @@ -11 +11 @@ AWS CloudFormation template -Checks if running Amazon Elastic Compute Cloud (EC2) instances are launched using amazon key pairs. The rule is NON_COMPLIANT if a running EC2 instance is launched with a key pair. +Checks if running Amazon EC2 instances were launched without key pairs. The rule is NON_COMPLIANT if an instance was launched with a key pair. Evaluation is based on launch-time configuration only.