AWS imagebuilder: Image Builder doc history: encryption, Inspector, CIS, STIG entries
Summary
Adds new changelog entries (build on running instance, encryption content reorganization, distribution settings, PowerShell examples, Amazon Inspector integration, CIS hardening components, Inspector scan status/findings retention) and edits existing entries (STIG Q3 2025 title, removal of STIG Q1 2024 entry, typo fix).
Security assessment
This is a documentation-history/changelog file; the added lines only announce documentation updates, including encryption-at-rest/key-management and Amazon Inspector scanning content. No specific vulnerability, CVE, or incident is referenced, so it is not security-issue-related, though it points readers to security documentation.
Evidence
+Encryption content| Reorganized the encryption content into encryption at rest and key management, and corrected the default key for components. Added container recipes to the resources that you can encrypt with a customer managed key. Documented the encryption context and the key permissions for workflows. For more information, see [Data protection and the AWS shared responsibility model in Image Builder](https://docs.aws.amazon.com/imagebuilder/latest/userguide/data-protection.html).| October 1, 2026
Diff
diff --git a/imagebuilder/latest/userguide/doc-history.md b/imagebuilder/latest/userguide/doc-history.md index 434c80e..778d6f5 100644 --- a//imagebuilder/latest/userguide/doc-history.md +++ b//imagebuilder/latest/userguide/doc-history.md @@ -17,0 +18,7 @@ Change| Description| Date +Build on an instance that is already running| Added how to build on an instance from an Auto Scaling group that you set in the infrastructure configuration, or on a specific instance that you pass to the `LaunchInstance` step action. Documented the `terminateInstanceOnCompletion` setting, which controls whether Image Builder terminates the instance after the build. For more information, see [Build on an instance from an Auto Scaling group](https://docs.aws.amazon.com/imagebuilder/latest/userguide/infra-config-parent-instance.html).| October 13, 2026 +Encryption content| Reorganized the encryption content into encryption at rest and key management, and corrected the default key for components. Added container recipes to the resources that you can encrypt with a customer managed key. Documented the encryption context and the key permissions for workflows. For more information, see [Data protection and the AWS shared responsibility model in Image Builder](https://docs.aws.amazon.com/imagebuilder/latest/userguide/data-protection.html).| October 1, 2026 +Expanded distribution settings documentation| Expanded the distribution settings documentation with concept guidance, per-Region limits, and full procedures for distributing existing images (**DistributeImage**), retrying failed images (**RetryImage**), and an overview of distribution workflows. For more information, see [Manage Image Builder distribution settings](https://docs.aws.amazon.com/imagebuilder/latest/userguide/manage-distribution-settings.html).| September 30, 2026 +AWS Tools for PowerShell examples| Added AWS Tools for PowerShell examples alongside the AWS CLI examples for listing, viewing, creating, tagging, and deleting Image Builder resources, including images, image and container recipes, components, image pipelines, infrastructure configurations, distribution configurations, workflows, and lifecycle policies. For an example, see [List images and build versions](https://docs.aws.amazon.com/imagebuilder/latest/userguide/image-details-list.html).| September 30, 2026 +Expanded Amazon Inspector integration content| Documented the Amazon Inspector activation requirement and the prerequisites for container image scanning in [Amazon Inspector integration in Image Builder](https://docs.aws.amazon.com/imagebuilder/latest/userguide/integ-inspector.html). This topic now also appears in the documentation for the China Regions. Documented the `--image-scanning-configuration` fields and the test stage requirements in [Create custom images with Image Builder](https://docs.aws.amazon.com/imagebuilder/latest/userguide/create-images.html), and when Image Builder sends the CVE Detected event in [Amazon EventBridge integration in Image Builder](https://docs.aws.amazon.com/imagebuilder/latest/userguide/integ-eventbridge.html).| September 22, 2026 +CIS hardening components| Updated the CIS hardening component guidance to describe how to subscribe to CIS hardening components in AWS Marketplace and use them with any parent image whose operating system the component supports. For more information, see [How EC2 Image Builder works](https://docs.aws.amazon.com/imagebuilder/latest/userguide/how-image-builder-works.html).| September 22, 2026 +Amazon Inspector scan status and findings retention| Added the image scan status and failure reasons that Image Builder reports for Amazon Inspector scans, and the scope and retention of the findings that Image Builder saves. For more information, see [Manage security findings for Image Builder images](https://docs.aws.amazon.com/imagebuilder/latest/userguide/image-security-findings.html).| September 22, 2026 @@ -42 +49 @@ Image pipeline enhancements| Enhancements include support for pipeline execution -[New script for Amazon Linux 2023](./ib-stig.html)| Added support for the SUSE Linux Enterprise Server (SLES) operating system. STIG versions and applied STIGS for the 2025 third quarter release for all compliance levels (low/medium/high).| September 4, 2025 +[STIG Q3 2025 updates and SLES support](./ib-stig.html)| Added support for the SUSE Linux Enterprise Server (SLES) operating system. STIG versions and applied STIGS for the 2025 third quarter release for all compliance levels (low/medium/high).| September 4, 2025 @@ -65 +71,0 @@ Document update: Reorganize content| Reorganized documentation to improve presen -[STIG Q1 updates](./ib-stig.html)| Updated Linux STIG versions and applied STIGS for 2024 first quarter release. There were no changes to Windows versions.| February 23, 2024 @@ -103 +109 @@ Update cron expressions| Image Builder cron processing is updated to increase cr -Feature release: Container support| Added support for creating Docker container images using Image Builder, with registration and storage of the resulting images on Amazon Elastic Container Registry (Amazon ECR). Content has been rearranged to reflect new functionality and accomodate future growth.| December 17, 2020 +Feature release: Container support| Added support for creating Docker container images using Image Builder, with registration and storage of the resulting images on Amazon Elastic Container Registry (Amazon ECR). Content has been rearranged to reflect new functionality and accommodate future growth.| December 17, 2020