Red Hat and Other Third-party Public AMIs Security Concern

As part of our ongoing efforts to drive security best practices across the AWS Cloud, we recently identified some Third Party Amazon Machine Images (AMIs) -- some Fedora, CentOS, and Red Hat Enterprise Linux (RHEL) AMIs -- that are not using AWS recommended best practices for making images secure by default. Red Hat has updated the RHEL AMIs in order to address this issue, and we have also provided our customers and other AMI publishers with the information they need to implement Amazon's recommended best practices for configuring their AMIs.

For details on these suggested best practices regarding using or sharing public AMIs please reference the following resources:

• How To Share and Use Public AMIs in A Secure Manner
• Protecting a Shared AMI