AWS greengrass documentation change
Summary
Updated HSM support for Greengrass Nucleus Lite to 'Yes', added TPM tutorial link, and expanded feature support (Docker, CloudWatch metrics).
Security assessment
Enabling HSM support for Nucleus Lite documents a security feature (hardware-protected credentials). No evidence of addressing a specific vulnerability, but improves security posture.
Diff
diff --git a/greengrass/v2/developerguide/operating-system-feature-support-matrix.md b/greengrass/v2/developerguide/operating-system-feature-support-matrix.md index ffb8ab4b2..3ec77496a 100644 --- a//greengrass/v2/developerguide/operating-system-feature-support-matrix.md +++ b//greengrass/v2/developerguide/operating-system-feature-support-matrix.md @@ -9 +9 @@ AWS IoT Greengrass supports devices that run various operating systems. Some fea -Messaging Feature | Linux | Windows | Greengrass lite (Linux) +Messaging Feature | Linux | Windows | Greengrass Nucleus Lite (Linux) @@ -20 +20 @@ Deploy and access secure, encrypted secrets from AWS Secrets Manager | Yes | -Use a hardware security module (HSM) to securely store the device's private key and certificate | Yes | No | No +Use a hardware security module (HSM) to securely store the device's private key and certificate | Yes | No | [Yes](./gg-lite-with-tpm-tutorial.html) @@ -29 +29 @@ Install AWS IoT Greengrass with AWS IoT fleet provisioning | Yes | Yes | Ye -Install AWS IoT Greengrass with custom provisioning plugins | Yes | Yes | No +Install AWS IoT Greengrass with custom provisioning | [Yes](https://docs.aws.amazon.com/greengrass/v2/developerguide/custom-provisioning.html) | [Yes](https://docs.aws.amazon.com/greengrass/v2/developerguide/custom-provisioning.html) | Yes @@ -52 +52 @@ Deploy and invoke Lambda functions | Yes | No | No -Run Docker containers in components | Yes | Yes | No +Run Docker containers in components | Yes | Yes | Yes @@ -57 +57 @@ Upload logs to Amazon CloudWatch Logs | Yes | Yes | Yes -Upload data to Amazon CloudWatch metrics using the CloudWatch metrics component | Yes | Yes | No +Upload data to Amazon CloudWatch metrics using the CloudWatch metrics component | Yes | Yes | Yes @@ -59 +59 @@ Publish messages to Amazon Simple Notification Service using the Amazon SNS comp -Publish data to Amazon Data Firehose delivery streams using stream manager | Yes | Yes | No +Publish data to Amazon Kinesis Data Streams delivery streams using stream manager | Yes | Yes | Yes