AWS AWSEC2: Added security guidance for EC2 Fast Launch permissions
Summary
Added new entry about permissions validation for EC2 Fast Launch with security considerations for launch template versions.
Security assessment
New documentation explicitly addresses security considerations around IAM permissions and launch template versions, helping prevent misconfigurations.
Evidence
+[Permissions checks for EC2 Fast Launch](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/win-fast-launch-configure.html#win-fast-launch-permissions)| Added guidance on how Amazon EC2 validates your permissions when you enable EC2 Fast Launch with a launch template, including a security consideration for using the `$Latest` or `$Default` launch template version.| August 14, 2026
Diff
diff --git a/AWSEC2/latest/UserGuide/DocumentHistory.md b/AWSEC2/latest/UserGuide/DocumentHistory.md index f48a13ab1..33e8d805c 100644 --- a//AWSEC2/latest/UserGuide/DocumentHistory.md +++ b//AWSEC2/latest/UserGuide/DocumentHistory.md @@ -11 +11 @@ History for 2018 and earlier -The following table describes important additions to the Amazon EC2 User Guide starting in 2019. We also update the guide frequently to address the feedback that you send us. +The following table describes important additions to the Amazon EC2 User Guide starting in 2019. The guide is also updated frequently to address the feedback that you send us. @@ -14,0 +15 @@ Change| Description| Date +[Permissions checks for EC2 Fast Launch](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/win-fast-launch-configure.html#win-fast-launch-permissions)| Added guidance on how Amazon EC2 validates your permissions when you enable EC2 Fast Launch with a launch template, including a security consideration for using the `$Latest` or `$Default` launch template version.| August 14, 2026 @@ -138 +139 @@ EC2-Classic has been deprecated| With EC2-Classic, EC2 instances ran in a single -[EC2 Instance Connect Endpoint](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/connect-with-ec2-instance-connect-endpoint.html)| You can now connect to an instance via SSH or RDP without requiring the instance to have a public IPv4 address.| June 13, 2023 +[EC2 Instance Connect Endpoint](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/connect-with-ec2-instance-connect-endpoint.html)| You can now connect to an instance through SSH or RDP without requiring the instance to have a public IPv4 address.| June 13, 2023 @@ -319 +320 @@ Scheduled Instances | 2015-10-01 | Scheduled Reserved Instances (Scheduled Ins -Longer resource IDs | 2015-10-01 | We're gradually introducing longer length IDs for some Amazon EC2 and Amazon EBS resource types. During the opt-in period, you can enable the longer ID format for supported resource types. | 13 January 2016 +Longer resource IDs | 2015-10-01 | Amazon EC2 is gradually introducing longer length IDs for some Amazon EC2 and Amazon EBS resource types. During the opt-in period, you can enable the longer ID format for supported resource types. | 13 January 2016 @@ -355 +356 @@ Copy an AMI from one Region to another | 2013-02-01 | You can copy an AMI from -Launch instances into a default VPC | 2013-02-01 | Your AWS account is capable of launching instances into either EC2-Classic or a VPC, or only into a VPC, on a region-by-region basis. If you can launch instances only into a VPC, we create a default VPC for you. When you launch an instance, we launch it into your default VPC, unless you create a nondefault VPC and specify it when you launch the instance. | 11 March 2013 +Launch instances into a default VPC | 2013-02-01 | Your AWS account is capable of launching instances into either EC2-Classic or a VPC, or only into a VPC, on a region-by-region basis. If you can launch instances only into a VPC, a default VPC is created for you. When you launch an instance, it launches into your default VPC, unless you create a nondefault VPC and specify it when you launch the instance. | 11 March 2013 @@ -386 +387 @@ Update to the Amazon EC2 VM Import Connector for VMware vCenter | | Added info -Spot Instances Availability Zone pricing changes | 2011-05-15 | Added information about the Spot Instances Availability Zone pricing feature. In this release, we've added new Availability Zone pricing options as part of the information returned when you query for Spot Instance requests and Spot price history. These additions make it easier to determine the price required to launch a Spot Instance into a particular Availability Zone. | 26 May 2011 +Spot Instances Availability Zone pricing changes | 2011-05-15 | Added information about the Spot Instances Availability Zone pricing feature. In this release, new Availability Zone pricing options have been added as part of the information returned when you query for Spot Instance requests and Spot price history. These additions make it easier to determine the price required to launch a Spot Instance into a particular Availability Zone. | 26 May 2011