AWS Security ChangesHomeSearch

AWS imagebuilder documentation change

Service: imagebuilder · 2026-07-07 · Documentation low

File: imagebuilder/latest/userguide/create-image-recipes.md

Summary

Added documentation for the new 'amiWatermarks' parameter in image recipes, allowing users to attach 1-5 watermark names to output AMIs for lineage tracking.

Security assessment

The change introduces a new feature for AMI lineage tracking but contains no evidence of addressing security vulnerabilities or weaknesses. Watermarks serve operational/traceability purposes without explicit security implications.

Diff

diff --git a/imagebuilder/latest/userguide/create-image-recipes.md b/imagebuilder/latest/userguide/create-image-recipes.md
index 71eea19cb..f392a15d6 100644
--- a//imagebuilder/latest/userguide/create-image-recipes.md
+++ b//imagebuilder/latest/userguide/create-image-recipes.md
@@ -194,0 +195,2 @@ Component parameters are plain text values, and are logged in AWS CloudTrail. We
+     * amiWatermarks (array of strings, optional) – A list of watermark names to attach to output AMIs built from this recipe. Watermarks are lineage markers that help you trace the history of your images. Specify 1 to 5 names. Each name must be 3 to 128 characters, and can include letters, numbers, spaces, and the following special characters: `( ) [ ] . / - ' @ _`. For more information, see [Track AMI lineage with watermarks](./ami-watermarks.html).
+