AWS solutions medium security documentation change
Summary
Removed example IAM policy details and bootstrap instance access instructions.
Security assessment
Deletes granular IAM policy examples and secure access procedures for bootstrap instances, potentially impacting secure setup documentation.
Diff
diff --git a/solutions/latest/migration-assistant-for-amazon-opensearch-service/step-2-setup-the-bootstrap-instance.md b/solutions/latest/migration-assistant-for-amazon-opensearch-service/step-2-setup-the-bootstrap-instance.md index 87a4e9639..83ab0c906 100644 --- a//solutions/latest/migration-assistant-for-amazon-opensearch-service/step-2-setup-the-bootstrap-instance.md +++ b//solutions/latest/migration-assistant-for-amazon-opensearch-service/step-2-setup-the-bootstrap-instance.md @@ -22,6 +22 @@ Example policy: - "arn:aws:ec2:us-west-2:12345678912:instance/<instance-id>", - "arn:aws:ssm:us-west-2:12345678912:document/BootstrapShellDoc-<stage>-<region>" - ] - } - ] - } + "arn:aws:ec2:us-west-2:12345678912:instance/ @@ -29,23 +23,0 @@ Example policy: - 2. To retrieve the instance id of the bootstrap instance that was deployed, run the following command: - -###### Note - -Alternatively, you can retrieve the instance id from the Amazon EC2 console. - - instance=$(aws ec2 describe-instances --filters 'Name=tag:Name,Values=bootstrap-*' --query 'Reservations[].Instances[].[InstanceId]' --output text) - - 3. Using the instance id obtained from the previous step, run the following command to access the bootstrap instance: - -###### Note - -Update the **Stage** if it isn’t `dev`, and update the **Region** if it isn’t `us-east-1`. - - aws ssm start-session --document-name BootstrapShellDoc-dev-us-east-1 --target $instance --region us-east-1 - - 4. To prepare the bootstrap instance for deploying the migration pieces, run: - -###### Note - -The initial setup can take approximately 10-15 minutes. - - ./initBootstrap.sh && cd deployment/cdk/opensearch-service-migration