AWS mgn medium security documentation change
Summary
Restructured prerequisites with dedicated server recommendation, openssl requirement, and explicit SSM agent management instructions
Security assessment
Added security controls including dedicated server isolation, mandatory openssl library, and SSM agent conflict prevention. These changes mitigate risks of privilege escalation and environment contamination.
Diff
diff --git a/mgn/latest/ug/mgn-connector-prerequisites.md b/mgn/latest/ug/mgn-connector-prerequisites.md index 3fce4cbb1..7e195aeaf 100644 --- a//mgn/latest/ug/mgn-connector-prerequisites.md +++ b//mgn/latest/ug/mgn-connector-prerequisites.md @@ -4,0 +5,2 @@ +General prerequisitesOperating systems that support the MGN connectorSSM requirements + @@ -7 +9,14 @@ -Installing the MGN connector requires a dedicated Linux server. The MGN connector can be deployed on the same server that hosts the MGN vCenter Client installer (agentless appliance). This server should be used only for the MGN connector and MGN agentless appliance, and should not be used for any other purposes. +To use the Application Migration Service connector you must meet these prerequisites. + +## General prerequisites + + * While the MGN connector can be deployed on the same server that hosts the MGN vCenter Client installer (agentless appliance), we recommend that the MGN connector be installed on a dedicated server. + + * The _openssl_ library must be installed on the server. + + * You must have the required [permissions](./mgn-connector-permissions.html). + + + + +## Operating systems that support the MGN connector @@ -20 +35,9 @@ The MGN connector can be installed on servers running the following Linux versio -###### Note +## SSM agent installation requirements + +Installation of the MGN Connector also installs the SSM agent. + + * If the SSM agent is already installed on the server you must uninstall it before installing the MGN connector. See [ Uninstalling SSM Agent from Linux instances ](https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-uninstall-agent.html) in the _AWS Systems Manager User Guide_. + + * A minimum of 200 MB of free disk space and 200 KB of free disk space in the `/var` directory. + + * Installation is not supported on these operating systems: @@ -22 +45 @@ The MGN connector can be installed on servers running the following Linux versio -Installation of the SSM Agent requires a minimum of 200 MB of free disk space and 200 KB of free disk space in the `/var` directory. + * CentOS 5.x @@ -24 +47 @@ Installation of the SSM Agent requires a minimum of 200 MB of free disk space an -In order to utilize AWS Application Migration Service connector, you must meet the following prerequisites: + * CentOS 6.x @@ -26 +49 @@ In order to utilize AWS Application Migration Service connector, you must meet t - * openssl + * RHEL 6.x @@ -27,0 +51 @@ In order to utilize AWS Application Migration Service connector, you must meet t + * Oracle 6.x @@ -28,0 +53 @@ In order to utilize AWS Application Migration Service connector, you must meet t + * Amazon Linux 1 @@ -31 +55,0 @@ In order to utilize AWS Application Migration Service connector, you must meet t -If the SSM agent is installed, it must be removed before installing the MGN connector. See [ Uninstalling SSM Agent from Linux instances ](https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-uninstall-agent.html) in the _AWS Systems Manager User Guide_. @@ -33 +56,0 @@ If the SSM agent is installed, it must be removed before installing the MGN conn -In addition, you must also have the required [permissions](./mgn-connector-permissions.html).