AWS fsx documentation change
Summary
Updated SSH connection instructions to require EC2 instance in same VPC, added CLI command examples with EC2 user context, corrected password format, updated NetApp CLI documentation link, and removed image reference
Security assessment
Changes emphasize proper access methods through EC2 instances in the same VPC as a security best practice, but there's no evidence of addressing a specific vulnerability. Password format change appears to be documentation clarity rather than security remediation.
Diff
diff --git a/fsx/latest/ONTAPGuide/managing-resources-ontap-apps.md index 3a21aad01..dc6c8cd32 100644 --- a/fsx/latest/ONTAPGuide/managing-resources-ontap-apps.md +++ b/fsx/latest/ONTAPGuide/managing-resources-ontap-apps.md @@ -67 +67 @@ You can manage your Amazon FSx for NetApp ONTAP resources using the NetApp ONTAP -You can run ONTAP CLI commands on your FSx for ONTAP file system, analogous to running them on a NetApp ONTAP cluster. You access the ONTAP CLI on your file system by establishing a secure shell (SSH) connection to the file system's management endpoint, logging in with the `fsxadmin` username and password. You have the option to set the password when you create file system using the custom create flow or using the AWS CLI. If you created the file system using the Quick create option, the `fsxadmin` password was not set, so you'll to set one in order to log in to the ONTAP CLI. For more information, see [Updating file systems](./updating-file-system.html). You can find the **DNS name** and **IP address** of your file system's management endpoint in the Amazon FSx console, in the **Administration** tab of the FSx for ONTAP file system details page, shown in the following graphic. +You can run ONTAP CLI commands on your FSx for ONTAP file system, similar to running them on a NetApp ONTAP cluster. You access the ONTAP CLI on your file system by establishing a secure shell (SSH) connection to the file system's management endpoint, and logging in with the `fsxadmin` username and password. You have the option to set the `fsxadmin` password when you create a file system using the [custom create flow](./creating-file-systems.html) or using the AWS CLI. If you created the file system using the Quick create option, the `fsxadmin` password was not set, so you'll need to set one in order to log in to the ONTAP CLI. For more information about setting the file system's `fsxadmin`, password, see [Updating file systems](./updating-file-system.html). You can find the **DNS name** and **IP address** of your file system's management endpoint in the Amazon FSx console, in the **Administration** tab of the FSx for ONTAP file system details page. @@ -69,3 +69 @@ You can run ONTAP CLI commands on your FSx for ONTAP file system, analogous to r - - -To connect to the file system's management endpoint with SSH, use the `fsxadmin` user and password. You can SSH into the file system's management endpoint IP address or DNS name from a client that is in the same VPC as the file system, as in the following examples. +To connect to the file system's management endpoint with SSH, first log in to an EC2 instance in the same VPC as the FSx for ONTAP file system. Once you're logged into the EC2 instance, use the `fsxadmin` user and password to SSH into the file system's management endpoint IP address or DNS name, as in the following examples. @@ -79 +77 @@ The SSH command with sample values: - ssh [email protected] + ec2user $ ssh [email protected] @@ -84 +82 @@ The SSH command using the management endpoint DNS name: - ssh fsxadmin@file-system-management-endpoint-dns-name + ec2user $ ssh fsxadmin@file-system-management-endpoint-dns-name @@ -89,2 +87,2 @@ The SSH command using a sample DNS name: - $ ssh [email protected] - Password: fsxadmin-password + ec2user $ ssh [email protected] + Password: fsxadmin_password @@ -99 +97 @@ The `fsxadmin`'s administrative view is at the file system level, which includes -To see a list of the commands that `fsxadmin` can run, use the following [`security login role show`](https://docs.netapp.com/us-en/ontap-cli-9131/security-login-role-show.html) ONTAP CLI command: +To see a list of the commands that `fsxadmin` can run, use the following [`security login role show`](https://docs.netapp.com/us-en/ontap-cli/security-login-role-show.html) ONTAP CLI command: @@ -132 +130 @@ To see a list of the commands that `fsxadmin` can run, use the following [`secur - 363 entries were displayed. + 378 entries were displayed.