AWS Security ChangesHomeSearch

AWS sap documentation change

Service: sap · 2025-04-25 · Documentation low

File: sap/latest/sap-AnyDB/rhel-sap-ase-ha-setup.md

Summary

Updated documentation formatting for hostnames and commands - added angle brackets to denote variables, removed comment symbols from executable commands, and standardized cluster setup syntax.

Security assessment

Changes primarily involve syntax formatting (adding < > placeholders) and removing comment symbols from commands to reflect executable syntax. No explicit security vulnerability fixes, credential handling changes, or new security features are introduced. The 'passwd hacluster' command correction improves clarity but does not indicate a security flaw being addressed.

Diff

diff --git a/sap/latest/sap-AnyDB/rhel-sap-ase-ha-setup.md b/sap/latest/sap-AnyDB/rhel-sap-ase-ha-setup.md
index 73b6ca582..31bf9daa9 100644
--- a//sap/latest/sap-AnyDB/rhel-sap-ase-ha-setup.md
+++ b//sap/latest/sap-AnyDB/rhel-sap-ase-ha-setup.md
@@ -56 +56 @@ The commands in this section use the example values provided in [Define referenc
-Install SAP ASE database on `rhxdbhost01` with virtual hostname `rhxvdb`, using the high availability option of Software Provisioning Manager (SWPM) tool. You can use the `SAPINST_USE_HOSTNAME` parameter to install SAP using a virtual hostname.
+Install SAP ASE database on `<rhxdbhost01>` with virtual hostname `rhxvdb`, using the high availability option of Software Provisioning Manager (SWPM) tool. You can use the `SAPINST_USE_HOSTNAME` parameter to install SAP using a virtual hostname.
@@ -59 +59 @@ Install SAP ASE database on `rhxdbhost01` with virtual hostname `rhxvdb`, using
-    <swpm location>/sapinst SAPINST_USE_HOSTNAME=rhxvdb
+    <swpm location>/sapinst SAPINST_USE_HOSTNAME=<rhxvdb>
@@ -92 +92 @@ This is applicable to both cluster nodes. Change the password of the operating s
-    # passwd hacluster
+    passwd hacluster
@@ -122,3 +122,2 @@ This is applicable on both cluster nodes. Run the following command to enable an
-    # systemctl start pcsd.service
-    # systemctl enable pcsd.service
-    
+    systemctl start pcsd.service
+    systemctl enable pcsd.service
@@ -129 +128 @@ Run the following command to check the status of cluster service.
-    # systemctl status pcsd.service
+    systemctl status pcsd.service
@@ -151 +149 @@ Run the following command to back up the current configuration for reference.
-    # pcs config show > /tmp/pcsconfig_backup.txt
+    pcs config show > /tmp/pcsconfig_backup.txt
@@ -156 +154 @@ Run the following command to clear the current configuration.
-    # pcs cluster destroy
+    pcs cluster destroy
@@ -160 +158 @@ Run the following command to clear the current configuration.
-The following command authenticates `pcs` to the `pcs daemon` on cluster nodes. It should be run on only one of the cluster nodes. The username and password for the `pcs` user must be the same, and the username should be `hacluster`.
+The following command authenticates `pcs` to the `pcs daemon` on cluster nodes. It should be run on only one of the cluster nodes. The username and password for the `pcs` user must be the same, and the username should be `<hacluster>`.
@@ -165,2 +163,2 @@ The following command authenticates `pcs` to the `pcs daemon` on cluster nodes.
-    # pcs cluster auth rhxdbhost01 rhxdbhost02
-    Username: hacluster
+    pcs cluster auth <rhxdbhost01> <rhxdbhost02>
+    Username: <hacluster>
@@ -175,2 +172,2 @@ The following command authenticates `pcs` to the `pcs daemon` on cluster nodes.
-    # pcs host auth rhxdbhost01 rhxdbhost02
-    Username: hacluster
+    pcs host auth <rhxdbhost01> <rhxdbhost02>
+    Username: <hacluster>
@@ -189,6 +185,6 @@ The following command configures the `cluster configuration` file, and syncs the
-    # pcs cluster setup --name rhelha rhxdbhost01 rhxdbhost02
-    Destroying cluster on nodes: rhxdbhost01, rhxdbhost02...
-    rhxdbhost02: Stopping Cluster (pacemaker)...
-    rhxdbhost01: Stopping Cluster (pacemaker)...
-    rhxdbhost02: Successfully destroyed cluster
-    rhxdbhost01: Successfully destroyed cluster
+    pcs cluster setup --name <rhelha> <rhxdbhost01> <rhxdbhost02>
+    Destroying cluster on nodes: <rhxdbhost01>, <rhxdbhost02>...
+    <rhxdbhost02>: Stopping Cluster (pacemaker)...
+    <rhxdbhost01>: Stopping Cluster (pacemaker)...
+    <rhxdbhost02>: Successfully destroyed cluster
+    <rhxdbhost01>: Successfully destroyed cluster
@@ -196,3 +192,3 @@ The following command configures the `cluster configuration` file, and syncs the
-    Sending 'pacemaker_remote authkey' to 'rhxdbhost01', 'rhxdbhost02'
-    rhxdbhost01: successful distribution of the file 'pacemaker_remote authkey'
-    rhxdbhost02: successful distribution of the file 'pacemaker_remote authkey'
+    Sending 'pacemaker_remote authkey' to '<rhxdbhost01>', '<rhxdbhost02>'
+    <rhxdbhost01>: successful distribution of the file 'pacemaker_remote authkey'
+    <rhxdbhost02>: successful distribution of the file 'pacemaker_remote authkey'
@@ -200,2 +196,2 @@ The following command configures the `cluster configuration` file, and syncs the
-    rhxdbhost01: Succeeded
-    rhxdbhost02: Succeeded
+    <rhxdbhost01>: Succeeded
+    <rhxdbhost02>: Succeeded
@@ -203,3 +199,3 @@ The following command configures the `cluster configuration` file, and syncs the
-    Synchronizing pcsd certificates on nodes rhxdbhost01, rhxdbhost02...
-    rhxdbhost01: Success
-    rhxdbhost02: Success
+    Synchronizing pcsd certificates on nodes <rhxdbhost01>, <rhxdbhost02>...
+    <rhxdbhost01>: Success
+    <rhxdbhost02>: Success
@@ -207,3 +203,2 @@ The following command configures the `cluster configuration` file, and syncs the
-    rhxdbhost01: Success
-    rhxdbhost02: Success.
-    
+    <rhxdbhost01>: Success
+    <rhxdbhost02>: Success.
@@ -214,17 +209,17 @@ The following command configures the `cluster configuration` file, and syncs the
-    # pcs cluster setup rhelha rhxdbhost01 rhxdbhost02 
-            No addresses specified for host 'rhxdbhost01', using 'rhxdbhost01'
-            No addresses specified for host 'rhxdbhost02', using 'rhxdbhost02' 
-            Destroying cluster on hosts: 'rhxdbhost01', 'rhxdbhost02'... 
-            rhxdbhost01: Successfully destroyed cluster 
-            rhxdbhost02: Successfully destroyed cluster
-            Requesting remove 'pcsd settings' from 'rhxdbhost01', 'rhxdbhost02' 
-            rhxdbhost01: successful removal of the file 'pcsd settings' 
-            rhxdbhost02: successful removal of the file 'pcsd settings' 
-            Sending 'corosync authkey', 'pacemaker authkey' to 'rhxdbhost01', 'rhxdbhost02' 
-            rhxdbhost01: successful distribution of the file 'corosync authkey' 
-            rhxdbhost01: successful distribution of the file 'pacemaker authkey' 
-            rhxdbhost02: successful distribution of the file 'corosync authkey' 
-            rhxdbhost02: successful distribution of the file 'pacemaker authkey' 
-            Sending 'corosync.conf' to 'rhxdbhost01', 'rhxdbhost02' 
-            rhxdbhost01: successful distribution of the file 'corosync.conf'
-            rhxdbhost02: successful distribution of the file 'corosync.conf' 
+    pcs cluster setup <rhelha> <rhxdbhost01> <rhxdbhost02>
+            No addresses specified for host '<rhxdbhost01>', using '<rhxdbhost01>'
+            No addresses specified for host '<rhxdbhost02>', using '<rhxdbhost02>'
+            Destroying cluster on hosts: '<rhxdbhost01>', '<rhxdbhost02>'...
+            <rhxdbhost01>: Successfully destroyed cluster
+            <rhxdbhost02>: Successfully destroyed cluster
+            Requesting remove 'pcsd settings' from '<rhxdbhost01>', '<rhxdbhost02>'
+            <rhxdbhost01>: successful removal of the file 'pcsd settings'
+            <rhxdbhost02>: successful removal of the file 'pcsd settings'
+            Sending 'corosync authkey', 'pacemaker authkey' to '<rhxdbhost01>', '<rhxdbhost02>'
+            <rhxdbhost01>: successful distribution of the file 'corosync authkey'
+            <rhxdbhost01>: successful distribution of the file 'pacemaker authkey'
+            <rhxdbhost02>: successful distribution of the file 'corosync authkey'
+            <rhxdbhost02>: successful distribution of the file 'pacemaker authkey'
+            Sending 'corosync.conf' to '<rhxdbhost01>', '<rhxdbhost02>'
+            <rhxdbhost01>: successful distribution of the file 'corosync.conf'
+            <rhxdbhost02>: successful distribution of the file 'corosync.conf'