anchor.diff:  
   -   `ena_support` (boolean) - Enable enhanced networking (ENA but not
       SriovNetSupport) on HVM-compatible AMIs. If set, add
  -    `ec2:ModifyInstanceAttribute` to your AWS IAM policy. If false, this will
  -    disable enhanced networking in the final AMI as opposed to passing the
  -    setting through unchanged from the source. Note: you must make sure
  -    enhanced networking is enabled on your instance. See [Amazon's
  -    documentation on enabling enhanced
  +    `ec2:ModifyInstanceAttribute` to your AWS IAM policy. Note: you must
  +    make sure enhanced networking is enabled on your instance. See
  +    [Amazon's documentation on enabling enhanced
       networking](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/enhanced-networking.html#enabling_enhanced_networking).
   
   -   `enable_t2_unlimited` (boolean) - Enabling T2 Unlimited allows the source
  
positive.code: 
  -   `skip_region_validation` (boolean) - Set to `true` if you want to skip
      validation of the region configuration option. Defaults to `false`.
  
  -   `snapshot_groups` (array of strings) - A list of groups that have access to
      create volumes from the snapshot(s). By default no groups have permission
      to create volumes from the snapshot(s). `all` will make the snapshot
      publicly accessible.
  
  -   `snapshot_users` (array of strings) - A list of account IDs that have
      access to create volumes from the snapshot(s). By default no additional
      users other than the user creating the AMI has permissions to create
      volumes from the backing snapshot(s).
  
  -   `source_ami_filter` (object) - Filters used to populate the `source_ami`
      field. Example:
  
negative.code: marked for deletion on termination will remain in your account.
  
  
  <%= partial "partials/builders/aws-ssh-differentiation-table" %>
  