AWS fsx medium security documentation change
Summary
Removed references to using 'fsxadmin' user for SSH access to SVM management endpoints, now only allowing 'vsadmin'
Security assessment
The removal of 'fsxadmin' as an allowed SSH user indicates a security hardening measure to reduce potential attack surface. This change directly modifies authentication methods, suggesting mitigation of risks associated with multiple privileged accounts.
Diff
diff --git a/fsx/latest/ONTAPGuide/managing-resources-ontap-apps.md b/fsx/latest/ONTAPGuide/managing-resources-ontap-apps.md index dc6c8cd32..05f91152a 100644 --- a/fsx/latest/ONTAPGuide/managing-resources-ontap-apps.md +++ b/fsx/latest/ONTAPGuide/managing-resources-ontap-apps.md @@ -134 +134 @@ To see a list of the commands that `fsxadmin` can run, use the following [`secur -You can access the ONTAP CLI on your SVM by establishing a secure shell (SSH) connection to the SVM's management endpoint using either the `fsxadmin` or the `vsadmin` user name and password. You can find the SVM's management endpoint **DNS name** and **IP address** in the Amazon FSx console, in the **Endpoints** panel of the **Storage virtual machines** details page, shown in the following graphic. +You can access the ONTAP CLI on your SVM by establishing a secure shell (SSH) connection to the SVM's management endpoint using the `vsadmin` user name and password. You can find the SVM's management endpoint **DNS name** and **IP address** in the Amazon FSx console, in the **Endpoints** panel of the **Storage virtual machines** details page, shown in the following graphic. @@ -138 +138 @@ You can access the ONTAP CLI on your SVM by establishing a secure shell (SSH) co -To connect to the SVM's management endpoint with SSH, you can use either the `vsadmin` or `fsxadmin` username and password. If you did not set a password for the `vsadmin` user when the SVM was created, you can set the `vsadmin` password at anytime. For more information, see [Updating storage virtual machines (SVM)](./updating-svms.html). You can SSH into the SVM from a client that is in the same VPC as the file system, using the management endpoint IP address or DNS name. +To connect to the SVM's management endpoint with SSH, you can use the `vsadmin` username and password. If you did not set a password for the `vsadmin` user when the SVM was created, you can set the `vsadmin` password at anytime. For more information, see [Updating storage virtual machines (SVM)](./updating-svms.html). You can SSH into the SVM from a client that is in the same VPC as the file system, using the management endpoint IP address or DNS name.