AWS opsworks documentation change
Summary
Streamlined service role creation steps and removed reference to downloading a root CA certificate.
Security assessment
Removal of CA certificate download step might indicate changes in certificate management, but no security issue or new security documentation is explicitly mentioned.
Diff
diff --git a/opsworks/latest/userguide/opscm-create-server-cfn.md b/opsworks/latest/userguide/opscm-create-server-cfn.md index 7dd49ea72..a494d0034 100644 --- a//opsworks/latest/userguide/opscm-create-server-cfn.md +++ b//opsworks/latest/userguide/opscm-create-server-cfn.md @@ -111 +111 @@ If your local computer is not already running the AWS CLI, download and install - 2. Create a service role and an instance profile. AWS OpsWorks provides an AWS CloudFormation template that you can use to create both. Run the following AWS CLI command to create an AWS CloudFormation stack that creates the service role and instance profile for you. + 2. Create a service role and an instance profile. @@ -113,3 +113 @@ If your local computer is not already running the AWS CLI, download and install - aws cloudformation create-stack --stack-name OpsWorksCMRoles --template-url https://s3.amazonaws.com/opsworks-cm-us-east-1-prod-default-assets/misc/opsworks-cm-roles.yaml --capabilities CAPABILITY_NAMED_IAM - -After AWS CloudFormation finishes creating the stack, find and copy the ARNs of service roles in your account. +Find and copy the ARNs of service roles in your account. @@ -179,2 +176,0 @@ The following is an example that includes sample values for the `CHEF_AUTOMATE_A -If you are not using a custom domain, download the root certificate authority (CA) certificate from the following Amazon S3 bucket location: [https://s3.amazonaws.com/opsworks-cm-us-east-1-prod-default-assets/misc/opsworks-cm-ca-2020-root.pem](https://s3.amazonaws.com/opsworks-cm-us-east-1-prod-default-assets/misc/opsworks-cm-ca-2020-root.pem). Save the certificate file in a secure but convenient location. This certificate is required to configure `knife.rb` in the next step. -