Update solutions AMIs #1871
Merged
Update solutions AMIs #1871
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
We've recieved reports that the solutions project AMI need to be updatd due to some security issues that have been discovered. I've updated all images to the latest release, including gov regions. I've also changed the source for the images, previous we would use the first image returned by searching the AMI catalog, instead we are calling the Amazon managed parameter that holds these details for all regions. I've also updated the script to detect if there are missing regions that need to be opted into since we saw a new region arrive "ap-east-2", this should prevent folks that run this script in the future from missing any existing or new regions. Finally I've also sorted the generated list, which should make it clearer to see any updates in the future. Signed-off-by: Peter Nied <[email protected]>
peternied
requested review from
AndreKurait,
chelma,
gregschohn,
jugal-chauhan,
lewijacn,
mikaylathompson and
sumobrian
as code owners
peternied
temporarily deployed
to
migrations-cicd
GitHub Actions
Inactive
peternied
temporarily deployed
to
migrations-cicd
GitHub Actions
Inactive
Signed-off-by: Peter Nied <[email protected]>
jugal-chauhan
approved these changes
Oct 7, 2025
peternied
temporarily deployed
to
migrations-cicd
GitHub Actions
Inactive
peternied
temporarily deployed
to
migrations-cicd
GitHub Actions
Inactive
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #1871 +/- ##
============================
============================
☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Description
We have received reports that the solutions project AMI need to be updated due to security issues that have been discovered in the older AMI images the bootstrap process uses. I've updated all images to the latest release, including gov regions.
I have also changed the source for the images, previous we would use the first image returned by searching the EC2 AMI catalog, instead we are calling the Amazon managed parameter that holds these details for all regions.
I have also updated the script to detect if there are missing regions that need to be opted into since we saw a new region arrive "ap-east-2", this should prevent folks that run this script in the future from missing any existing or new regions.
Finally I've also sorted the generated list, which should make it clearer to see any updates in the future.
Testing
Tested deployment in gov region, no issues.
Check List
Public documentation issue/PR created, if applicable.By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.