AWS fsx documentation change

Service: fsx · 2025-03-10 · Documentation low

File: fsx/latest/WindowsGuide/step2-configure-spn-kerberos.md

Summary

Simplified SPN configuration commands by consolidating into a single Set-AdComputer command for both FQDN and alias

Security assessment

Change improves command syntax for Kerberos configuration but doesn't address security vulnerabilities or introduce new security features. The update is about configuration efficiency rather than security content.

Diff

diff --git a/fsx/latest/WindowsGuide/step2-configure-spn-kerberos.md
index 730031bde..cce833468 100644
--- a/fsx/latest/WindowsGuide/step2-configure-spn-kerberos.md
+++ b/fsx/latest/WindowsGuide/step2-configure-spn-kerberos.md
@@ -101,5 +101,2 @@ You can also get the DNS name in the response of the [DescribeFileSystems](https
-    ##Use one of the following commands, not both:
-    Set-AdComputer -Identity $FSxAdComputer -Add @{"msDS-AdditionalDnsHostname"="$Alias"}
-    ##Or
-    SetSpn /S ("HOST/" + $Alias.Split('.')[0]) $FSxAdComputer.Name
-    SetSpn /S ("HOST/" + $Alias) $FSxAdComputer.Name
+    ##Use the following command to set both the full FQDN and Alias SPNs
+    Set-AdComputer -Identity $FSxAdComputer -Add @{"msDS-AdditionalDnsHostname" = @($Alias, $Alias.Split(".")[0])}