AWS deadline-cloud medium security documentation change
Summary
Reorganized queue settings into optional sections, added budget requirements, and adjusted navigation flow.
Security assessment
The documentation continues to recommend creating a new service role per queue for S3 access, which is a security measure to enforce least-privilege permissions. No explicit vulnerability is addressed, but security best practices are reinforced.
Diff
diff --git a/deadline-cloud/latest/userguide/define-queue.md b/deadline-cloud/latest/userguide/define-queue.md index aa2b95863..8700b4f86 100644 --- a//deadline-cloud/latest/userguide/define-queue.md +++ b//deadline-cloud/latest/userguide/define-queue.md @@ -21 +21,3 @@ You can only use lowercase letters and dashes. No spaces or special characters. - 4. If you are using customer-managed fleets, select **Enable association with customer-managed fleets**. + 4. (Optional) Choose **Additional farm settings**. + + 1. If you are using customer-managed fleets, select **Enable association with customer-managed fleets**. @@ -25 +27,3 @@ You can only use lowercase letters and dashes. No spaces or special characters. - 5. Your queue requires permission to access Amazon S3 on your behalf. We recommend you create a new service role for every queue. + 2. If you want to set a budget for a queue, choose **Require a budget for this queue**. If you require a budget, you must create the budget using the Deadline Cloud console to schedule jobs in the queue. + + 2. Your queue requires permission to access Amazon S3 on your behalf. We recommend you create a new service role for every queue. @@ -39 +43,8 @@ You can only use lowercase letters and dashes. No spaces or special characters. - 6. (Optional) Add environment variables for the queue environment using name and value pairs. + 3. (Optional) Add environment variables for the queue environment using name and value pairs. + + 4. (Optional) Add tags for the queue using key and value pairs. + + + + +Choose one of the following options: @@ -41 +52 @@ You can only use lowercase letters and dashes. No spaces or special characters. - 7. (Optional) Add tags for the queue using key and value pairs. + * Select **Skip to Review and Create** to [ review and create your farm](./review-and-create.html). @@ -42,0 +54 @@ You can only use lowercase letters and dashes. No spaces or special characters. + * Select **Next** to proceed to additional, optional steps. @@ -46 +57,0 @@ You can only use lowercase letters and dashes. No spaces or special characters. -After you enter all the queue details, choose **Next**.