AWS fsx documentation change
Summary
Restructured security/data protection section with detailed links, added monitoring tools section, updated feature links, and expanded encryption/security controls documentation
Security assessment
Changes enhance documentation of security features (encryption types, antivirus, auditing, SnapLock) and compliance, but no evidence of addressing specific vulnerabilities. Adds new security control documentation links.
Diff
diff --git a/fsx/latest/ONTAPGuide/what-is-fsx-ontap.md b/fsx/latest/ONTAPGuide/what-is-fsx-ontap.md index 3a81685b4..466302695 100644 --- a//fsx/latest/ONTAPGuide/what-is-fsx-ontap.md +++ b//fsx/latest/ONTAPGuide/what-is-fsx-ontap.md @@ -5 +5 @@ -Features of FSx for ONTAPSecurity and data protectionPricing for FSx for ONTAPFSx for ONTAP on AWS re:PostAre you a first-time Amazon FSx user? +Features of FSx for ONTAPSecurity and data protectionMonitoring toolsPricing for FSx for ONTAPFSx for ONTAP on AWS re:PostAre you a first-time Amazon FSx user? @@ -43,0 +44,2 @@ FSx for ONTAP also provides rich integration with other AWS services, such as AW + * Monitoring tools + @@ -59 +61 @@ With FSx for ONTAP, you get a fully managed file storage solution with: - * Up to tens of gigabytes per second (GBps) of throughput per file system + * Up to tens of gigabytes per second (GBps) of [throughput per file system](./managing-throughput-capacity.html) @@ -61 +63 @@ With FSx for ONTAP, you get a fully managed file storage solution with: - * Multi-protocol access to data using the Network File System (NFS), Server Message Block (SMB), Internet Small Computer Systems Interface (iSCSI), and Non-Volatile Memory Express (NVMe) protocols + * Multi-protocol [access to data](./supported-fsx-clients.html) using the Network File System (NFS), Server Message Block (SMB), Internet Small Computer Systems Interface (iSCSI), and Non-Volatile Memory Express (NVMe) protocols @@ -63 +65 @@ With FSx for ONTAP, you get a fully managed file storage solution with: - * Highly available and durable Multi-AZ and Single-AZ deployment options + * Highly available and durable [Multi-AZ and Single-AZ](./high-availability-AZ.html) deployment options @@ -69 +71 @@ With FSx for ONTAP, you get a fully managed file storage solution with: - * Support for NetApp's SnapMirror replication feature + * Support for NetApp's [SnapMirror replication](./scheduled-replication.html) feature @@ -77,15 +79 @@ With FSx for ONTAP, you get a fully managed file storage solution with: - * NetApp ONTAP CLI, REST API, and BlueXP - - * Support for the following data protection and security features: - - * Encryption of file system data and backups at rest using AWS KMS keys - - * Encryption of data in transit using SMB Kerberos session keys - - * On-demand antivirus scanning - - * Authentication and authorization using Microsoft Active Directory - - * File access auditing - - * NetApp SnapLock WORM feature with support for Compliance and Enterprise volumes + * [NetApp ONTAP CLI, REST API, and BlueXP](./managing-resources-ontap-apps.html) @@ -98,3 +86 @@ With FSx for ONTAP, you get a fully managed file storage solution with: -Amazon FSx provides multiple levels of security and compliance to facilitate protecting your data. It automatically encrypts data at rest in file systems and backups using keys that you manage in AWS Key Management Service (AWS KMS). You can also encrypt data in transit using Kerberos for NFS and SMB clients. - -Amazon FSx has been assessed to comply with the following standards: +The shared responsibility model is employed as it relates to [Security in Amazon FSx for NetApp ONTAP](./security.html). Amazon FSx provides multiple levels of security and [compliance](./fsx-ontap-compliance.html) to facilitate protecting your data. @@ -102 +88 @@ Amazon FSx has been assessed to comply with the following standards: - * International Standards Organization (ISO) +FSx for ONTAP supports the following data protection, security, and access control features: @@ -104 +90 @@ Amazon FSx has been assessed to comply with the following standards: - * Payment Card Industry Data Security Standard (PCI DSS) + * [Encrypting data at rest](./encryption-at-rest.html) for file system data and backups using AWS KMS keys @@ -106 +92 @@ Amazon FSx has been assessed to comply with the following standards: - * System and Organization Controls (SOC) certifications + * Encrypting data in transit using: @@ -108 +94 @@ Amazon FSx has been assessed to comply with the following standards: - * The Health Insurance Portability and Accountability Act of 1996 (HIPAA) + * [SMB Kerberos](./encryption-in-transit.html#kerberos-encryption) @@ -109,0 +96 @@ Amazon FSx has been assessed to comply with the following standards: + * [IPSEC](./encryption-in-transit.html#ipsec-encryption) @@ -110,0 +98 @@ Amazon FSx has been assessed to comply with the following standards: + * [Nitro-based](./encryption-in-transit.html#nitro-encryption) encryption @@ -111,0 +100 @@ Amazon FSx has been assessed to comply with the following standards: + * On-demand [antivirus scanning](./using-vscan.html) @@ -113 +102 @@ Amazon FSx has been assessed to comply with the following standards: -For more information, see [Data protection in Amazon FSx for NetApp ONTAP](./data-protection.html). + * Authentication and authorization using [Microsoft Active Directory](./ad-integration-ontap.html) @@ -115 +104 @@ For more information, see [Data protection in Amazon FSx for NetApp ONTAP](./dat -Amazon FSx also provides the following levels of access control: + * [File access auditing](./file-access-auditing.html) @@ -117 +106 @@ Amazon FSx also provides the following levels of access control: - * At the file system level, Amazon FSx provides access control by using Amazon Virtual Private Cloud (Amazon VPC) security groups. + * [NetAppSnapLock](./snaplock.html) WORM with Compliance and Enterprise retention modes @@ -119 +107,0 @@ Amazon FSx also provides the following levels of access control: - * At the API level, Amazon FSx provides access control by using AWS Identity and Access Management (IAM) access policies. @@ -121 +108,0 @@ Amazon FSx also provides the following levels of access control: - * To provide access control at the file and folder level, Amazon FSx supports Unix permissions, NFS access control lists (ACLs), and NTFS ACLs. When you join Amazon FSx to an Active Directory, users who are accessing file systems can authenticate using their Active Directory credentials. @@ -123,0 +111 @@ Amazon FSx also provides the following levels of access control: +For more information, see [Data protection in Amazon FSx for NetApp ONTAP](./data-protection.html) and [Protecting your data](./protecting-data.html). @@ -124,0 +113 @@ Amazon FSx also provides the following levels of access control: +Additionally, Amazon FSx protects your data with highly durable file system backups. Amazon FSx performs automatic daily backups, and you can take additional backups at any point. For more information, see [Protecting your data](./protecting-data.html). @@ -126 +115 @@ Amazon FSx also provides the following levels of access control: -So that you can see the actions taken by users on your Amazon FSx resources, Amazon FSx integrates with AWS CloudTrail to monitor and log your Amazon FSx API calls. For more information, see [Monitoring FSx for ONTAP API Calls with AWS CloudTrail](./logging-using-cloudtrail-win.html). +## Monitoring tools @@ -128 +117 @@ So that you can see the actions taken by users on your Amazon FSx resources, Ama -Additionally, Amazon FSx protects your data with highly durable file system backups. Amazon FSx performs automatic daily backups, and you can take additional backups at any point. For more information, see [Protecting your data](./protecting-data.html). +Monitoring tools include [CloudWatch](./monitoring-cloudwatch.html), [CloudTrail](./logging-using-cloudtrail-win.html), [ONTAP EMS events](./ems-events.html), [NetApp Data Infrastructure Insights](./monitoring-cloud-insights.html), and [NetApp Harvest](./monitoring-harvest-grafana.html).