AWS outposts high security documentation change
Summary
Updated subscription management process with reduced lead time (30 days to 5 business days), revised console navigation steps, and added detailed server return procedures including data destruction steps.
Security assessment
The change introduces explicit instructions to 'Destroy the Nitro Security Key (NSK) to cryptographically shred your data' during server return preparation. This addresses data security risks by ensuring sensitive data is irrecoverably erased before physical hardware leaves customer control, preventing potential data leakage.
Diff
diff --git a/outposts/latest/server-userguide/term-end-server.md b/outposts/latest/server-userguide/term-end-server.md index 1e108fe57..29649f693 100644 --- a//outposts/latest/server-userguide/term-end-server.md +++ b//outposts/latest/server-userguide/term-end-server.md @@ -5 +5 @@ -Renew subscriptionEnd subscriptionConvert subscription +Renew subscriptionReturn serversConvert subscription @@ -13 +13 @@ At the end of your AWS Outposts term, you must choose between the following opti - * End your subscription and return your Outposts servers. + * Return your Outposts servers. @@ -22 +22 @@ At the end of your AWS Outposts term, you must choose between the following opti -You must complete the following steps at least **30 days** before the current subscription for your Outposts servers ends. +You must complete the following steps at least **5 business days** before the current subscription for your Outposts servers ends. Failing to complete these steps at least 5 business days before the current subscription ends might result in unanticipated charges. @@ -26 +26 @@ You must complete the following steps at least **30 days** before the current su - 1. Sign in to the [AWS Support Center](https://console.aws.amazon.com/support/home#/) Console. + 1. Open the AWS Outposts console at [https://console.aws.amazon.com/outposts/](https://console.aws.amazon.com/outposts/home). @@ -28 +28 @@ You must complete the following steps at least **30 days** before the current su - 2. Choose **Create case**. + 2. In the navigation pane, choose **Outposts**. @@ -30 +30 @@ You must complete the following steps at least **30 days** before the current su - 3. Choose **Account and billing**. + 3. Choose **Actions**. @@ -32 +32 @@ You must complete the following steps at least **30 days** before the current su - 4. For **Service** , choose **Billing**. + 4. Choose **Renew Outpost**. @@ -34 +34 @@ You must complete the following steps at least **30 days** before the current su - 5. For **Category** , choose **Other Billing Questions**. + 5. Choose the subscription term length and payment option. @@ -36 +36 @@ You must complete the following steps at least **30 days** before the current su - 6. For **Severity** , choose **Important question**. +For pricing, see [AWS Outposts servers pricing](https://aws.amazon.com/outposts/servers/pricing/). You can also request a price quote. @@ -38 +38 @@ You must complete the following steps at least **30 days** before the current su - 7. Choose **Next step: Additional information**. + 6. Choose **Submit support ticket**. @@ -40 +39,0 @@ You must complete the following steps at least **30 days** before the current su - 8. On the **Additional information** page, for **Subject** , enter your request to renew such as `Renew my Outpost subscription`. @@ -42 +40,0 @@ You must complete the following steps at least **30 days** before the current su - 9. For **Description** , enter one of the following payment options: @@ -44 +41,0 @@ You must complete the following steps at least **30 days** before the current su - * No upfront @@ -46 +43 @@ You must complete the following steps at least **30 days** before the current su - * Partial upfront +###### Note @@ -48 +45 @@ You must complete the following steps at least **30 days** before the current su - * All upfront +If renewing before the current subscription for your Outposts servers ends, you will be charged immediately for any upfront fees. @@ -50 +47 @@ You must complete the following steps at least **30 days** before the current su -For pricing, see [AWS Outposts servers pricing](https://aws.amazon.com/outposts/servers/pricing/). You can also request a price quote. +Your new subscription will start the day after your current subscription ends. @@ -52 +49 @@ For pricing, see [AWS Outposts servers pricing](https://aws.amazon.com/outposts/ - 10. Choose **Next step: Solve now or contact us**. +If you do not indicate that you want to renew your subscription or return your Outposts server, you will be converted to a month-to-month subscription automatically. Your Outpost will be renewed on a monthly basis at the rate of the **No Upfront** payment option that corresponds to your AWS Outposts configuration. Your new monthly subscription will start the day after your current subscription ends. @@ -54 +51 @@ For pricing, see [AWS Outposts servers pricing](https://aws.amazon.com/outposts/ - 11. On the **Contact us** page, choose your preferred language. +## Return Outposts servers @@ -56 +53 @@ For pricing, see [AWS Outposts servers pricing](https://aws.amazon.com/outposts/ - 12. Choose your preferred contact method. +To return a server because the server reached the end of the contract term, you must first complete the decommission process at least **5 business days** before the current subscription for your Outposts servers ends. AWS can't start the return process until you do so. Failing to complete the decommission process at least 5 business days before the current subscription ends might result in delays in decommissioning and unanticipated charges. @@ -58 +55 @@ For pricing, see [AWS Outposts servers pricing](https://aws.amazon.com/outposts/ - 13. Review your case details and then choose **Submit**. Your case ID number and summary appear. +After you complete the decommission process, you must prepare the server for return, obtain the shipping label, and pack and return the server to AWS. @@ -59,0 +57 @@ For pricing, see [AWS Outposts servers pricing](https://aws.amazon.com/outposts/ +###### Tasks @@ -60,0 +59 @@ For pricing, see [AWS Outposts servers pricing](https://aws.amazon.com/outposts/ + * Step 1: Prepare the server for return @@ -61,0 +61 @@ For pricing, see [AWS Outposts servers pricing](https://aws.amazon.com/outposts/ + * Step 2: Decommission the server @@ -63 +63 @@ For pricing, see [AWS Outposts servers pricing](https://aws.amazon.com/outposts/ -AWS Customer Support will initiate the subscription renewal process. Your new subscription will start the day after your current subscription ends. + * Step 3: Obtain the return shipping label @@ -65 +65,18 @@ AWS Customer Support will initiate the subscription renewal process. Your new su -If you do not indicate that you want to renew your subscription or return your Outposts server, you will be converted to a month-to-month subscription automatically. Your Outpost will be renewed on a monthly basis at the rate of the **No Upfront** payment option that corresponds to your AWS Outposts configuration. Your new monthly subscription will start the day after your current subscription ends. + * Step 4: Pack the server + + * Step 5: Return the server through the courier + + + + +### Step 1: Prepare the server for return + +To prepare the server for return, unshare resources, backup data, delete local network interfaces and terminate active instances. + + 1. If the Outpost's resources are shared, you must unshare these resources. + +You can unshare a shared Outpost resource in one of the following ways: + + * Use the AWS RAM console. For more information, see [Updating a resource share](https://docs.aws.amazon.com/ram/latest/userguide/working-with-sharing-update.html) in the _AWS RAM User Guide_. + + * Use the AWS CLI to run the [disassociate-resource-share](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/ram/disassociate-resource-share.html) command. @@ -67 +84 @@ If you do not indicate that you want to renew your subscription or return your O -## End your subscription and return the server +For the list of Outpost resources that can be shared, see [Shareable Outpost resources](https://docs.aws.amazon.com/outposts/latest/userguide/sharing-outposts.html#sharing-resources). @@ -69 +86,14 @@ If you do not indicate that you want to renew your subscription or return your O -You must complete the following steps at least **30 days** before the current subscription for your Outposts servers ends. AWS can't start the return process until you do so. + 2. Create backups of the data stored in the instance storage of the Amazon EC2 instances running on the AWS Outposts server. + + 3. Delete the local network interfaces associated with the instances that were running on the server. + + 4. Terminate the active instances associated with subnets on your Outpost. To terminate the instances, follow the instructions in [Terminate your instance](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/terminating-instances.html) in the _Amazon EC2 User Guide_. + + 5. Destroy the Nitro Security Key (NSK) to cryptographically shred your data on the server. To destroy the NSK, follow the instructions in [Cryptographically shred server data](https://docs.aws.amazon.com/outposts/latest/server-userguide/outpost-maintenance.html#outpost-server-cryptographically-shred-data). + + + + +### Step 2: Decommission the server + +Complete the following steps at least **5 business days** before the current subscription for your Outposts servers ends. @@ -73 +103,11 @@ You must complete the following steps at least **30 days** before the current su -AWS can't stop the return process after you have opened a support case to end your subscription. +AWS can't stop the return process after you have submitted your decommission request. + + 1. Open the AWS Outposts console at [https://console.aws.amazon.com/outposts/](https://console.aws.amazon.com/outposts/home). + + 2. In the navigation pane, choose **Outposts**. + + 3. Choose **Actions**. + + 4. Choose **Decommission Outpost**. + + 5. Choose a reason for the decommission. @@ -75 +115 @@ AWS can't stop the return process after you have opened a support case to end yo -###### To end your subscription + 6. Choose **Submit support ticket**. @@ -77 +116,0 @@ AWS can't stop the return process after you have opened a support case to end yo - 1. Sign in to the [AWS Support Center](https://console.aws.amazon.com/support/home#/) Console. @@ -79 +117,0 @@ AWS can't stop the return process after you have opened a support case to end yo - 2. Choose **Create case**. @@ -81 +118,0 @@ AWS can't stop the return process after you have opened a support case to end yo - 3. Choose **Account and billing**. @@ -83 +120,46 @@ AWS can't stop the return process after you have opened a support case to end yo - 4. For **Service** , choose **Billing**. +###### Note + +Returning your Outposts servers before the current subscription ends will not terminate any outstanding charges associated with this Outpost. + +### Step 3: Obtain the return shipping label + +###### Important + +You must only use the shipping label that AWS provides because it contains specific information, such as the Asset ID, about the server that you are returning. Do not create your own shipping label. + +###### To obtain your shipping label: + + 1. Open the AWS Outposts console at [https://console.aws.amazon.com/outposts/](https://console.aws.amazon.com/outposts/home). + + 2. On the navigation pane, choose **Orders**. + + 3. Under **Replacement order summary** , choose **Print return label** and choose the configuration ID of the server that you plan to return. + + + + +###### Note + +Returning your Outposts servers before the current subscription ends will not terminate any outstanding charges associated with this Outpost. + +### Step 4: Pack the server + +To pack your server, use the box and packaging material provided by AWS. + + 1. Pack the server in one of the following boxes: + + * The box and packaging material that the server originally came in. + + * The box and packaging material that the replacement server came in. + +Alternatively, contact [AWS Support Center](https://console.aws.amazon.com/support/home#/) to request a box. + + 2. Affix the shipping label that AWS provided, to the outside of the box. + +###### Important + +Verify that the Asset ID on the shipping label matches the Asset ID on the server that you are returning. + +The Asset ID is located on the pull-out tab on the front of the server. Example: `1203779889` or `9305589922` + + 3. Seal the box securely. @@ -85 +166,0 @@ AWS can't stop the return process after you have opened a support case to end yo - 5. For **Category** , choose **Other Billing Questions**. @@ -87 +167,0 @@ AWS can't stop the return process after you have opened a support case to end yo - 6. For **Severity** , choose **Important question**. @@ -89 +168,0 @@ AWS can't stop the return process after you have opened a support case to end yo - 7. Choose **Next step: Additional information**. @@ -91 +170 @@ AWS can't stop the return process after you have opened a support case to end yo - 8. On the **Additional information** page, for **Subject** , enter a clear request, such as `End my Outpost subscription`. +### Step 5: Return the server through the courier @@ -93 +172 @@ AWS can't stop the return process after you have opened a support case to end yo - 9. For **Description** , enter the date you wish to end your subscription. +You must return the server through the designated courier for your country. You can deliver the server to the courier or schedule the day and time that you prefer for the courier to pick up the server. The shipping label that AWS provides contains the correct address to return the server. @@ -95 +174 @@ AWS can't stop the return process after you have opened a support case to end yo - 10. Choose **Next step: Solve now or contact us**. +The following table shows who to contact for the country you are shipping from: @@ -97 +176,3 @@ AWS can't stop the return process after you have opened a support case to end yo - 11. On the **Contact us** page, choose your preferred language. +Country | Contact +---|--- +Argentina | Contact [AWS Support Center](https://console.aws.amazon.com/support/home#/). In your request, include the following information: @@ -99 +180,5 @@ AWS can't stop the return process after you have opened a support case to end yo