AWS sap documentation change
Summary
Updated documentation to consistently use 'AWS IAM' terminology instead of 'IAM' and made minor syntax/formatting improvements
Security assessment
Changes focus on branding consistency (adding 'AWS' before IAM references) and formatting cleanup. No new security policies or vulnerability mitigations were introduced. The existing security-related IAM policies remain unchanged in their requirements and permissions.
Diff
diff --git a/sap/latest/sap-hana/sap-hana-on-aws-oip.md b/sap/latest/sap-hana/sap-hana-on-aws-oip.md index c1b7329d2..37af22305 100644 --- a//sap/latest/sap-hana/sap-hana-on-aws-oip.md +++ b//sap/latest/sap-hana/sap-hana-on-aws-oip.md @@ -5 +5 @@ -Overlay IP addressIAM roles and policies +Overlay IP addressAWS IAM roles and policies @@ -9 +9 @@ Overlay IP addressIAM roles and policies -Using the overlay IP agent with a shared Amazon VPC requires a different set of IAM permissions to be granted on both AWS accounts (sharing and consumer). The cluster resource agent `aws-vpc-move-ip` also uses a different configuration syntax. +Using the overlay IP agent with a shared Amazon VPC requires a different set of AWS IAM permissions to be granted on both AWS accounts (sharing and consumer). The cluster resource agent `aws-vpc-move-ip` also uses a different configuration syntax. @@ -15 +15 @@ Create an overlay IP address on the Amazon VPC routing table which will be used -## IAM roles and policies +## AWS IAM roles and policies @@ -19 +19 @@ Create an overlay IP address on the Amazon VPC routing table which will be used -Create an IAM role to delegate permissions to the Amazon EC2 instances that will be a part of the cluster. When creating the IAM role, select **Another AWS account** for the type of trusted entity and enter the AWS Account ID where the Amazon EC2 instances will be deployed. +Create an AWS IAM role to delegate permissions to the Amazon EC2 instances that will be a part of the cluster. When creating the AWS IAM role, select **Another AWS account** for the type of trusted entity and enter the AWS Account ID where the Amazon EC2 instances will be deployed. @@ -21 +21 @@ Create an IAM role to delegate permissions to the Amazon EC2 instances that will -Create the following IAM policy on the Amazon VPC account and attach it to the IAM role. Add or remove route table entries as needed. +Create the following AWS IAM policy on the Amazon VPC account and attach it to the AWS IAM role. Add or remove route table entries as needed. @@ -46 +45 @@ Create the following IAM policy on the Amazon VPC account and attach it to the I -Create a new IAM role and select **Amazon EC2** as the use case. Associate this IAM role to the two Amazon EC2 instances which are a part of the cluster. Attach the following IAM policies (AWS STS and STONITH) to the IAM role. +Create a new AWS IAM role and select **Amazon EC2** as the use case. Associate this AWS IAM role to the two Amazon EC2 instances which are a part of the cluster. Attach the following AWS IAM policies (AWS STS and STONITH) to the AWS IAM role. @@ -63,2 +62 @@ Create a new IAM role and select **Amazon EC2** as the use case. Associate this - -Replace VPC-Account-Number with your AWS account number that owns the Amazon VPC. Replace Sharing-VPC-Account-Cluster-Role with the IAM role that was created in the AWS account owning the Amazon VPC. +Replace VPC-Account-Number with your AWS account number that owns the Amazon VPC. Replace Sharing-VPC-Account-Cluster-Role with the AWS IAM role that was created in the AWS account owning the Amazon VPC. @@ -68 +66 @@ Replace VPC-Account-Number with your AWS account number that owns the Amazon VPC -Both instances of the cluster require access to start and stop other nodes within the cluster. Create the following STONITH policy and attach it to the IAM role that is assigned to both of the cluster instances. +Both instances of the cluster require access to start and stop other nodes within the cluster. Create the following STONITH policy and attach it to the AWS IAM role that is assigned to both of the cluster instances.