AWS opsworks medium security documentation change
Summary
Removed instructions for downloading legacy PEM/P7B certificate files and notes about trusting both old/new certificates during root certificate renewal
Security assessment
Removes references to outdated 2016 root certificates and simplifies certificate trust requirements, likely related to security best practices for certificate rotation. Phasing out old certificates helps prevent potential man-in-the-middle attacks using deprecated certs.
Diff
diff --git a/opsworks/latest/userguide/opspup-puppet-dashboard.md b/opsworks/latest/userguide/opspup-puppet-dashboard.md index 1470d3f6b..681f6ee1c 100644 --- a//opsworks/latest/userguide/opspup-puppet-dashboard.md +++ b//opsworks/latest/userguide/opspup-puppet-dashboard.md @@ -21,16 +20,0 @@ When you attempt to connect to the Puppet Enterprise console webpage, certificat - * For Linux or MacOS-based systems, download the file with the **PEM** filename extension from the following Amazon S3 location: [https://s3.amazonaws.com/opsworks-cm-us-east-1-prod-default-assets/misc/opsworks-cm-ca-2016-root.pem](https://s3.amazonaws.com/opsworks-cm-us-east-1-prod-default-assets/misc/opsworks-cm-ca-2016-root.pem). - -###### Note - -Additionally, download a newer PEM file from the following location: [https://s3.amazonaws.com/opsworks-cm-us-east-1-prod-default-assets/misc/opsworks-cm-ca-2020-root.pem](https://s3.amazonaws.com/opsworks-cm-us-east-1-prod-default-assets/misc/opsworks-cm-ca-2020-root.pem). Because OpsWorks for Puppet Enterprise is currently renewing its root certificates, you must trust both old and new certificates. - -For more information about how to manage SSL certificates on MacOS, see [Get information about a certificate in Keychain Access on Mac](https://support.apple.com/guide/keychain-access/get-information-about-a-certificate-kyca15178/11.0/mac/11.0) on the Apple Support website. - - * For Windows-based systems, download the file with the **P7B** filename extension from the following Amazon S3 location: [https://s3.amazonaws.com/opsworks-cm-us-east-1-prod-default-assets/misc/opsworks-cm-ca-2016-root.p7b](https://s3.amazonaws.com/opsworks-cm-us-east-1-prod-default-assets/misc/opsworks-cm-ca-2016-root.p7b). - -For more information about how to install an SSL certificate on Windows, see [Manage Trusted Root Certificates](https://technet.microsoft.com/en-us/library/cc754841.aspx) on Microsoft TechNet. - -###### Note - -Additionally, download a newer P7B file from the following location: [https://s3.amazonaws.com/opsworks-cm-us-east-1-prod-default-assets/misc/opsworks-cm-ca-2020-root.p7b](https://s3.amazonaws.com/opsworks-cm-us-east-1-prod-default-assets/misc/opsworks-cm-ca-2020-root.p7b). Because OpsWorks for Puppet Enterprise is currently renewing its root certificates, you must trust both old and new certificates. -