AWS evs documentation change
Summary
Added detailed VPC configuration requirements including main route table setup and DHCP options for DNS/NTP servers. Updated license key validation notes.
Security assessment
Changes focus on network configuration requirements and license key handling but do not address specific vulnerabilities. While proper network configuration impacts security, there's no evidence of addressing a known security issue.
Diff
diff --git a/evs/latest/userguide/setting-up.md b/evs/latest/userguide/setting-up.md index b985b7538..4c8116795 100644 --- a//evs/latest/userguide/setting-up.md +++ b//evs/latest/userguide/setting-up.md @@ -5 +5 @@ -Sign up for AWSCreate an IAM userCreate an IAM role to delegate Amazon EVS permission to an IAM userSign up for an AWS Business, AWS Enterprise On-Ramp, or AWS Enterprise Support planCheck quotasPlan VPC CIDR sizesCreate an Amazon EC2 Capacity ReservationSet up the AWS CLICreate an Amazon EC2 key pairPrepare your environment for VMware Cloud Foundation (VCF)Acquire VCF license keysVMware HCX prerequisites +Sign up for AWSCreate an IAM userCreate an IAM role to delegate Amazon EVS permission to an IAM userSign up for an AWS Business, AWS Enterprise On-Ramp, or AWS Enterprise Support planCheck quotasPlan VPC CIDR sizes and configure VPC componentsCreate an Amazon EC2 Capacity ReservationSet up the AWS CLICreate an Amazon EC2 key pairPrepare your environment for VMware Cloud Foundation (VCF)Acquire VCF license keysVMware HCX prerequisites @@ -27 +27 @@ To use Amazon EVS, you will need to configure other AWS services, as well as set - * Plan VPC CIDR sizes + * Plan VPC CIDR sizes and configure VPC components @@ -197 +197 @@ Amazon EVS environment creation fails if you do not sign up for an AWS Business, -To enable Amazon EVS environment creation, ensure that your account has the required minimum account-level quota value of 4 for the host count per EVS environment quota. The default value is 0. For more information, see [Service quotas](./service-quotas-evs.html#sq-text). +To enable Amazon EVS environment creation, ensure that your account has the required minimum account-level quotas. For more information, see [Service quotas](./service-quotas-evs.html#sq-text). @@ -203 +203 @@ Amazon EVS environment creation fails if the host count per EVS environment quot -## Plan VPC CIDR sizes +## Plan VPC CIDR sizes and configure VPC components @@ -205 +205,18 @@ Amazon EVS environment creation fails if the host count per EVS environment quot -To enable Amazon EVS environment creation, you must provide Amazon EVS with a VPC that contains a subnet and enough IP address space for Amazon EVS to create the VLAN subnets that connect to your VCF appliances. For more information, see [Amazon EVS networking considerations](./architecture.html#evs-subnets) and [Amazon EVS VLAN subnet](./concepts.html#concepts-evs-network). +To enable Amazon EVS environment creation, you must provide Amazon EVS with a VPC that contains a subnet and enough IP address space for Amazon EVS to create the VLAN subnets that connect to your VCF appliances. For more information about VPC creation requirements, see [Create a VPC with subnets and route tables](./getting-started.html#getting-started-create-vpc). + +### Main route table + +Amazon EVS subnets are implicitly associated to your VPC’s main route table when they are created. To enable connectivity to dependent services such as DNS or on-premises systems for successful environment deployment, you must configure the VPC’s main route table to allow traffic to these systems. For more information about main route table configuration for Amazon EVS, see [Configure the VPC main route table](./getting-started.html#getting-started-vpc-main-route-table-config). + +### DHCP option set + +Amazon EVS uses your VPC’s DHCP option set to retrieve the following: + + * Domain Name System (DNS) servers that are used to resolve host IP addresses. + + * Network Time Protocol (NTP) servers that are used to avoid time synchronization issues in the SDDC. + + + + +For more information about Amazon EVS supported options for DNS and NTP server configuration, see [Configure DNS and NTP servers using the VPC DHCP option set](./getting-started.html#getting-started-config-dns-ntp-dhcp). @@ -234,0 +252,4 @@ To use Amazon EVS, you need to provide a VCF solution key and a vSAN license key +Your VCF license will be available to Amazon EVS across all AWS Regions for license compliance. Amazon EVS does not validate license keys. To validate license keys, visit [Broadcom support](https://support.broadcom.com/web/ecx). + +###### Note +