hashicorp / packer-plugin-amazon

Packer plugin for Amazon AMI Builder

Home Page:https://www.packer.io/docs/builders/amazon

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

New AWS EC2 BPA (Block Public Access) feature to be enabled as part of Amazon plugin

exolain opened this issue · comments

Please search the existing issues for relevant feature requests, and use the
reaction feature
(https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/)
to add upvotes to pre-existing requests.

Community Note

Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request.
Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request.
If you are interested in working on this issue or have submitted a pull request, please leave a comment.

Description

AWS Enabled this new feature: EC2 Block Public Access (BPA)
https://aws.amazon.com/about-aws/whats-new/2023/09/amazon-ec2-block-public-access-machine-images/

Use Case(s)

To prevent custom AMIs from being exposed to the public.

Potential configuration

I'm wondering if we could have a bool variable that we can set to disable public access sharing
Something like:
block_public_access: true
would have Packer change the AMI BPA attribute to true and disable public sharing.

Potential References

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/sharingamis-intro.html#block-public-access-to-amis

Thanks!

Found a way to implement it that wouldn't need to be from packer at all. Sorry for the noise.

Closing