From: Michael Brown <mcb30@ipxe.org>
Date: Fri, 17 Oct 2025 13:21:06 +0000 (+0100)
Subject: [cloud] Remove AWS public image access block automatically if needed
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=ba1846a0d3f90e399d30a22b600a25d9c966b3b3;p=thirdparty%2Fipxe.git

[cloud] Remove AWS public image access block automatically if needed

Making images public is blocked by default in new AWS regions.  Remove
this block automatically whenever creating a public image.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
---

diff --git a/contrib/cloud/aws-import b/contrib/cloud/aws-import
index 3b6b5223a..8ec71f454 100755
--- a/contrib/cloud/aws-import
+++ b/contrib/cloud/aws-import
@@ -104,6 +104,7 @@ def import_image(region, name, family, architecture, image, public, overwrite,
     image_id = image['ImageId']
     client.get_waiter('image_available').wait(ImageIds=[image_id])
     if public:
+        client.disable_image_block_public_access()
         resource.Image(image_id).modify_attribute(Attribute='launchPermission',
                                                   OperationType='add',
                                                   UserGroups=['all'])