AWS appstream2 medium security documentation change
Summary
Added concurrency limitation note restricting multiple agents per session and per user-fleet combination
Security assessment
Explicitly documents session isolation controls preventing concurrent access, which directly addresses session hijacking/confusion risks by enforcing one-agent-per-session rule
Diff
diff --git a/appstream2/latest/developerguide/getting-started-agent-access.md b/appstream2/latest/developerguide/getting-started-agent-access.md index c99581eb7..57fdcb53f 100644 --- a//appstream2/latest/developerguide/getting-started-agent-access.md +++ b//appstream2/latest/developerguide/getting-started-agent-access.md @@ -221,0 +222,4 @@ The response includes a `StreamingURL` that you pass to your agent in the next s +###### Note + +At any given time, only one agent can connect to a unique session. Named users, specified through the `UserId` parameter, can have only one active session per fleet at a time. To run multiple agents concurrently, each agent must connect to its own unique session. +