AWS Security ChangesHomeSearch

AWS AWSEC2 documentation change

Service: AWSEC2 · 2026-07-13 · Documentation low

File: AWSEC2/latest/UserGuide/create-ec2-fleet.md

Summary

Added documentation for instant fleet overrides (IAM roles, SSH keys, metadata options), user data handling, and output fields including subnet/AZ details

Security assessment

Documents security features (IAM roles, SSH keys, metadata configuration) and user data handling, but provides no evidence of vulnerability remediation. Improves operational security awareness.

Diff

diff --git a/AWSEC2/latest/UserGuide/create-ec2-fleet.md b/AWSEC2/latest/UserGuide/create-ec2-fleet.md
index ed1c3821a..099ed290e 100644
--- a//AWSEC2/latest/UserGuide/create-ec2-fleet.md
+++ b//AWSEC2/latest/UserGuide/create-ec2-fleet.md
@@ -44,0 +45,11 @@ To override the parameters specified in the launch template, you can specify one
+For EC2 Fleets of type `instant`, you can also override the following launch template parameters:
+
+  * `IamInstanceProfile` – The IAM instance profile to associate with the instances. For more information, see [IAM roles for Amazon EC2](./iam-roles-for-amazon-ec2.html).
+
+  * `KeyName` – The name of the key pair to use for the instances. For more information, see [Amazon EC2 key pairs and Amazon EC2 instances](./ec2-key-pairs.html).
+
+  * `MetadataOptions` – The instance metadata service configuration for the instances. For more information, see [Use the Instance Metadata Service to access instance metadata](./configuring-instance-metadata-service.html).
+
+
+
+
@@ -46,0 +58,2 @@ For EC2 Fleets of type `instant`, you can specify a Systems Manager parameter in
+For EC2 Fleets of type `instant`, you can also specify user data at the launch template specification level using the `LaunchTemplateSpecificationUserData` parameter. With this parameter, you can provide base64-encoded user data without including it in the launch template itself. User data must not exceed 16 KB before base64 encoding.
+
@@ -68,0 +82,2 @@ The following is example output for a fleet of type `instant` that launched the
+The response includes the Availability Zone ID, Availability Zone name, and subnet ID for each set of launched instances.
+    
@@ -91 +106,4 @@ The following is example output for a fleet of type `instant` that launched the
-          "Platform": null
+          "Platform": null,
+          "AvailabilityZoneId": "use1-az1",
+          "AvailabilityZone": "us-east-1a",
+          "SubnetId": "subnet-0123456789abcdefEXAMPLE"
@@ -108 +126,5 @@ The following is example output for a fleet of type `instant` that launched the
-          ]
+          ],
+          "AvailabilityZoneId": "use1-az1",
+          "AvailabilityZone": "us-east-1a",
+          "SubnetId": "subnet-0123456789abcdefEXAMPLE"
+        }