AWS fsx documentation change
Summary
Removed documentation about enabling ARP in learning mode on existing/new volumes, deleted notes about learning mode duration recommendations
Security assessment
The changes streamline ARP documentation by removing learning mode procedures, but there's no evidence of addressing a specific security vulnerability. ARP itself is a security feature, but the changes represent documentation restructuring rather than security fixes.
Diff
diff --git a/fsx/latest/ONTAPGuide/enable-ARP.md b/fsx/latest/ONTAPGuide/enable-ARP.md index 01c915565..5cf6b2e40 100644 --- a//fsx/latest/ONTAPGuide/enable-ARP.md +++ b//fsx/latest/ONTAPGuide/enable-ARP.md @@ -7,27 +7 @@ -The following procedures explain how to use the ONTAP CLI to enable Autonomous Ransomware Protection (ARP) in learning mode and active mode as well as how to verify that ARP is enabled. For more information about ARP, see [How ARP works](./ARP.html#how-ARP-works). - -###### To enable ARP in learning mode on an existing volume using the ONTAP CLI - - * Run the following command. Replace `vol_name` and `svm_name` with your own information. - - security anti-ransomware volume dry-run -volume vol_name -vserver svm_name - -For more information about this command, see [`security anti-ransomware volume dry-run`](https://docs.netapp.com/us-en/ontap-cli/security-anti-ransomware-volume-dry-run.html) in the NetApp documentation center. - -###### Note - -Learning mode only applies to newly written data. Existing data isn't scanned or analyzed. Normal data traffic behaviors are determined based on the new data that's written after ARP is enabled on the volume. - - - - -###### To enable ARP in learning mode on a new volume using the ONTAP CLI - - * Run the following command. Replace `vol_name`, `svm_name`, `size`, and `/path_name` with your information. - - volume create -volume vol_name -vserver svm_name -aggregate aggr_name -size size -anti-ransomware-state dry-run -junction-path /path_name - -For more information about this command, see [`volume create`](https://docs.netapp.com/us-en/ontap-cli/volume-create.html#description) in the NetApp documentation center. - - - +The following procedures explain how to use the ONTAP CLI to enable Autonomous Ransomware Protection (ARP) active mode as well as how to verify that ARP is enabled. For more information about ARP, see [How ARP works](./ARP.html#how-ARP-works). @@ -43,4 +16,0 @@ For more information about this command, see [`security anti-ransomware volume e -###### Note - -We recommend keeping a volume in learning mode for a minimum of 30 days before converting to active mode. ARP automatically determines the optimal learning period and switches from learning mode when ready. This process might occur in less than 30 days. -