AWS cli medium security documentation change
Summary
Clarified source image requirements, distribution configuration constraints, and IAM role usage
Security assessment
Added security controls: source image must be in AVAILABLE state, distribution configuration must be in same Region, and explicit IAM role requirements. Prevents distribution of compromised/incomplete images and enforces proper access controls through IAM role specifications.
Diff
diff --git a/cli/latest/reference/imagebuilder/distribute-image.md b/cli/latest/reference/imagebuilder/distribute-image.md index 8aa9cca07..292c8b76d 100644 --- a//cli/latest/reference/imagebuilder/distribute-image.md +++ b//cli/latest/reference/imagebuilder/distribute-image.md @@ -15 +15 @@ - * [AWS CLI 2.35.11 Command Reference](../../index.html) » + * [AWS CLI 2.35.13 Command Reference](../../index.html) » @@ -59 +59 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c -DistributeImage distributes existing AMIs to additional regions and accounts without rebuilding the image. +Distributes an existing AMI to target Regions and accounts without running the full image build process. This operation only runs the distribution phase on an image that has already been built. @@ -100 +100 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/imageb -> The source image Amazon Resource Name (ARN) to distribute. +> The source image to distribute. Specify an AMI identifier, SSM parameter path, or Image Builder image Amazon Resource Name (ARN). When you specify an Image Builder image Amazon Resource Name (ARN), the image must be in the `AVAILABLE` state. @@ -111 +111 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/imageb -> The Amazon Resource Name (ARN) of the distribution configuration to use. +> The Amazon Resource Name (ARN) of the distribution configuration. The configuration defines target Regions, accounts, and AMI settings. The distribution configuration must be in the same Region as this operation. @@ -121 +121 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/imageb -> The IAM role to use for the distribution. +> The name or Amazon Resource Name (ARN) of the IAM role that Image Builder assumes to distribute the image. @@ -358 +358 @@ imageBuildVersionArn -> (string) - * [AWS CLI 2.35.11 Command Reference](../../index.html) » + * [AWS CLI 2.35.13 Command Reference](../../index.html) »