AWS cloudhsm documentation change
Summary
Added documentation for new issue: Operations can fail during backup creation and recommended best practices
Security assessment
The change addresses operational reliability during backup processes but does not describe any security vulnerabilities or security features. The resolution focuses on cluster architecture and retry mechanisms rather than security controls.
Diff
diff --git a/cloudhsm/latest/userguide/ki-hsm2m-medium.md b/cloudhsm/latest/userguide/ki-hsm2m-medium.md index 48f04c5a2..094b687fa 100644 --- a//cloudhsm/latest/userguide/ki-hsm2m-medium.md +++ b//cloudhsm/latest/userguide/ki-hsm2m-medium.md @@ -5 +5 @@ -Issue: Increased login latency on hsm2m.mediumIssue: A CO using trying to set the trusted attribute of a key will fail with Client SDK 5.12.0 and earlierIssue: ECDSA verify will fail with Client SDK 5.12.0 and earlier for clusters in FIPS modeIssue: Only the PEM-formatted certificates can be registered as mtls trust anchors with CloudHSM CLIIssue: Customer applications will stop processing all requests when using mTLS with a passphrase protected client private key.Issue: User replicate fails when using the CloudHSM CLI +Issue: Increased login latency on hsm2m.mediumIssue: A CO using trying to set the trusted attribute of a key will fail with Client SDK 5.12.0 and earlierIssue: ECDSA verify will fail with Client SDK 5.12.0 and earlier for clusters in FIPS modeIssue: Only the PEM-formatted certificates can be registered as mtls trust anchors with CloudHSM CLIIssue: Customer applications will stop processing all requests when using mTLS with a passphrase protected client private key.Issue: User replicate fails when using the CloudHSM CLIIssue: Operations can fail during backup creation @@ -24,0 +25,2 @@ The following issues impact all AWS CloudHSM hsm2m.medium instances. + * Issue: Operations can fail during backup creation + @@ -77 +79,16 @@ The following issues impact all AWS CloudHSM hsm2m.medium instances. - * **Resolution:** We're actively working to resolve this issue. For updates, see the [Document history](./document-history.html) in the user guide. + * **Resolution:** We're working to resolve this issue. For updates, see the [Document history](./document-history.html) in the user guide. + + + + +## Issue: Operations can fail during backup creation + + * **Impact:** Operations like generating random numbers can fail on hsm2m.medium instances while AWS CloudHSM creates a backup. + + * **Resolution:** To minimize service interruptions, implement these best practices: + + * Create a multi-HSM cluster + + * Configure your applications to retry cluster operations + +For more information about best practices, see [Best practices for AWS CloudHSM](./best-practices.html).