AWS appstream2: Add Credential Guard / memory integrity guidance for instances
Summary
Adds an Important note that memory integrity (HVCI) is not supported and must be disabled before enabling Credential Guard, plus minor table formatting changes.
Security assessment
Documents security-hardening guidance around Credential Guard and memory integrity (HVCI) for Windows images, which is security best-practice documentation rather than a fix for a specific vulnerability.
Evidence
+ _Memory integrity_ , also known as _hypervisor-protected code integrity (HVCI)_ or _hypervisor enforced code integrity_ , isn't supported. Before you turn on Credential Guard, you must ensure this feature is disabled. For more information, see [Disable memory integrity](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/credential-guard.html#disable-memory-integrity).
Diff
diff --git a/appstream2/latest/developerguide/instance-types.md b/appstream2/latest/developerguide/instance-types.md index e3938f6..7086e43 100644 --- a//appstream2/latest/developerguide/instance-types.md +++ b//appstream2/latest/developerguide/instance-types.md @@ -25,0 +26,8 @@ If your use case involves real-time audio-video (AV) or other scenarios that req +###### Important + +**Memory integrity** + + _Memory integrity_ , also known as _hypervisor-protected code integrity (HVCI)_ or _hypervisor enforced code integrity_ , isn't supported. Before you turn on Credential Guard, you must ensure this feature is disabled. For more information, see [Disable memory integrity](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/credential-guard.html#disable-memory-integrity). + +Enabling the feature may lead to performance or stability issues. We recommend disabling memory integrity in your Windows image. Credential Guard can remain enabled once memory integrity is disabled. + @@ -38 +45,0 @@ If you plan to use WorkSpaces Applications z1d-based instances, you must provisi -**Graphics Design** | Uses AMD FirePro S7150x2 Server GPUs and AMD Multiuser GPU technology to support graphics applications that use DirectX, OpenGL, or OpenCL. | AppStream-Graphics-Design-`WinServerOperatingSystemVersion`-`MM-DD-YYYY` @@ -52 +59 @@ Note: For G6f and Gr6f, use images with date 07-28-2025 or later. | For stream.g -Graphics G6e | Powered by NVIDIA L40S Tensor Core GPUs and third generation AMD EPYC processors. | [Import Image](./import-image.html) for Accelerated.g6e.* instance types +**Graphics G6e** | Powered by NVIDIA L40S Tensor Core GPUs and third generation AMD EPYC processors. | [Import Image](./import-image.html) for Accelerated.g6e.* instance types