AWS mwaa: MWAA shared responsibility: Apache Airflow OSS bug reporting and upgrades

Service: mwaa · 2026-10-09 · Documentation low

File: mwaa/latest/userguide/shared-responsibility.md

Summary

Adds a bullet to the shared responsibility model explaining that Amazon MWAA runs unmodified open-source Apache Airflow, that the Airflow community fixes core/provider bugs, and that customers should upgrade environments to obtain those fixes.

Security assessment

The added text clarifies the shared responsibility boundary for open-source Airflow defects and directs customers to upgrade to receive community fixes. It is general patching/vulnerability-management guidance within the shared responsibility model, not a fix for a specific vulnerability or incident.

Evidence

+  * **Apache Airflow open-source issues** – Amazon MWAA runs open-source Apache Airflow without changing it. The Apache Airflow community fixes bugs in Apache Airflow core and provider packages. Report bugs on the [Apache Airflow issues page](https://github.com/apache/airflow/issues) on the GitHub website. To get those fixes, upgrade your environment to a later supported version. For more information about Apache Airflow versions and environment upgrades, see [Apache Airflow versions on Amazon Managed Workflows for Apache Airflow](./airflow-versions.html) and [Changing the Apache Airflow version](./upgrading-environment.html).

Diff

diff --git a/mwaa/latest/userguide/shared-responsibility.md b/mwaa/latest/userguide/shared-responsibility.md
index ad1dc07..5761b38 100644
--- a//mwaa/latest/userguide/shared-responsibility.md
+++ b//mwaa/latest/userguide/shared-responsibility.md
@@ -32,0 +33,2 @@ We are responsible for protecting the infrastructure that runs AWS services in t
+  * **Apache Airflow open-source issues** – Amazon MWAA runs open-source Apache Airflow without changing it. The Apache Airflow community fixes bugs in Apache Airflow core and provider packages. Report bugs on the [Apache Airflow issues page](https://github.com/apache/airflow/issues) on the GitHub website. To get those fixes, upgrade your environment to a later supported version. For more information about Apache Airflow versions and environment upgrades, see [Apache Airflow versions on Amazon Managed Workflows for Apache Airflow](./airflow-versions.html) and [Changing the Apache Airflow version](./upgrading-environment.html).
+