AWS imagebuilder documentation change
Summary
Added changelog entry for new ec2:AttachImageWatermark permission in managed policies.
Security assessment
Documents new watermarking capability which is a security feature (tamper detection/DRM). No vulnerability is fixed; this enables new security functionality.
Diff
diff --git a/imagebuilder/latest/userguide/doc-history.md b/imagebuilder/latest/userguide/doc-history.md index d3fdc1ab1..869d6514a 100644 --- a//imagebuilder/latest/userguide/doc-history.md +++ b//imagebuilder/latest/userguide/doc-history.md @@ -17,0 +18 @@ Change| Description| Date +Updated managed policies for AMI watermarks| Image Builder added the `ec2:AttachImageWatermark` permission to the AWSServiceRoleForImageBuilder and EC2ImageBuilderExecutionPolicy managed policies so that Image Builder can attach AMI watermarks to the output AMIs it creates. For more information, see [AWS managed policies for Image Builder](https://docs.aws.amazon.com/imagebuilder/latest/userguide/security-iam-awsmanpol.html).| June 22, 2026