AWS m2 documentation change
Summary
Removed detailed instructions for creating Amazon VPC endpoints and IAM policies, deleted the specific list of approved EC2 instance types, and simplified IAM role creation steps. Replaced instance type references with generic instructions to choose available EC2 types.
Security assessment
The changes remove configuration details (VPC endpoints, IAM policies) but don't reference any security vulnerabilities or incidents. The removed IAM policy had overly permissive 'Resource: *' permissions, but its deletion doesn't indicate a resolved security issue. The simplification of security group references and removal of instance-specific lists are maintenance updates without security implications.
Diff
diff --git a/m2/latest/userguide/ba-infrastructure-setup.md b/m2/latest/userguide/ba-infrastructure-setup.md index c03f9ebac..9a3dc6169 100644 --- a//m2/latest/userguide/ba-infrastructure-setup.md +++ b//m2/latest/userguide/ba-infrastructure-setup.md @@ -5 +5 @@ -Infrastructure requirementsAmazon EC2 instance types for AWS Blu Age Runtime (on Amazon EC2)Running AWS Blu Age Runtime on Amazon EC2Running AWS Blu Age Runtime on Amazon ECS on Amazon EC2Running AWS Blu Age Runtime on Amazon EKS on Amazon EC2Running AWS Blu Age Runtime on Amazon ECS managed by AWS Fargate +Infrastructure requirementsRunning AWS Blu Age Runtime on Amazon EC2Running AWS Blu Age Runtime on Amazon ECS on Amazon EC2Running AWS Blu Age Runtime on Amazon EKS on Amazon EC2Running AWS Blu Age Runtime on Amazon ECS managed by AWS Fargate @@ -17,2 +16,0 @@ This topic describes the minimum infrastructure configuration required to run AW - * Amazon EC2 instance types for AWS Blu Age Runtime (on Amazon EC2) - @@ -61,67 +58,0 @@ If you plan to work on Amazon EC2 instances on Amazon EKS, skip this procedure b -###### Create an Amazon VPC endpoint - - 1. Open the Amazon VPC console at [https://console.aws.amazon.com/vpc/](https://console.aws.amazon.com/vpc/). - - 2. In the left navigation pane, under **Virtual private cloud** , choose **Endpoints**. - - 3. In the central pane, choose **Create endpoint**. - - 4. In the **Services** section, enter `SQS` in the search field, and then select the Amazon SQS service that corresponds to your Region. - - 5. In the **VPC** section, select the Amazon VPC that you created in the previous step. - - 6. In the **Subnets** section, select the subnet that you created for your application domain. - - 7. In the **Security groups** section, select the security group from the previous procedure. - - 8. Choose **Create endpoint**. - - - - -###### Create an IAM policy - - 1. Open the IAM console at [https://console.aws.amazon.com/iam/](https://console.aws.amazon.com/iam/). - - 2. In the left navigation pane, under **Access management** , choose **Policies**. - - 3. In the central pane, choose **Create policy**. - - 4. In the **Policy editor** section, choose **JSON**. - - 5. Replace all of the JSON that you see in the editor with the following JSON. - -JSON - - -**** - - - { - "Version":"2012-10-17", - "Statement": [ - { - "Sid": "VisualEditor0", - "Effect": "Allow", - "Action": [ - "sqs:GetQueueUrl", - "sqs:ReceiveMessage", - "sqs:SendMessage" - ], - "Resource": "*" - } - ] - } - - -###### Note - -If you need further details to customize your policy, contact your AWS Blu Age delivery manager or account manager. - - 6. Choose **Next**. - - 7. Enter a name for the policy, then choose **Create policy**. - - - - @@ -146,93 +77,4 @@ If you need further details to customize your policy, contact your AWS Blu Age d - 6. In the search box, enter the name of the policy that you created earlier. - - 7. Select the checkbox to the left of your policy. - -###### Note - -If you can't add a policy, finish creating the role and then update the role to add the policy. - - 8. Choose **Next**. - - 9. Enter a name for the role, then choose **Create role**. - - - - -## Amazon EC2 instance types for AWS Blu Age Runtime (on Amazon EC2) - -The following is a list of the Amazon EC2 instance types that you can use for AWS Blu Age Runtime (on Amazon EC2) when creating Amazon EC2 instances or when defining Amazon EKS worker nodes. - -Check that the instance of your interest is available in the desired region you plan to deploy. - - - t3.small - t3.medium - t3.large - t3.xlarge - t3.2xlarge - t2.small - t2.medium - t2.large - t2.xlarge - t2.2xlarge - r7a.medium - r7a.large - r7a.xlarge - r7a.2xlarge - r7a.4xlarge - r7a.8xlarge - r7a.12xlarge - r7a.16xlarge - r7a.24xlarge - r7a.32xlarge - r7a.48xlarge - r7a.metal-48xl - r7i.large - r7i.xlarge - r7i.2xlarge - r7i.4xlarge - r7i.8xlarge - r7i.12xlarge - r7i.16xlarge - r7i.24xlarge - r7i.48xlarge - r7i.metal-24xl - r7i.metal-48xl - r6i.xlarge - r6i.large - r6i.4xlarge - r6i.2xlarge - r5b.xlarge - r5b.large - r5b.2xlarge - r3.xlarge - m6i.xlarge - m6i.large - m6i.8xlarge - m6i.4xlarge - m6i.2xlarge - m6i.16xlarge - m5zn.xlarge - m5zn.large - m5zn.3xlarge - m5zn.2xlarge - m5.xlarge - m5.large - m5.8xlarge - m5.4xlarge - m5.2xlarge - m5.16xlarge - m5.12xlarge - c6i.xlarge - c6i.large - c6i.8xlarge - c6i.4xlarge - c6i.2xlarge - c6i.16xlarge - c5.xlarge - c5.large - c5.9xlarge - c5.4xlarge - c5.2xlarge - c5.18xlarge - c5.12xlarge + 6. Enter a name for the role, then choose **Create role**. + + + @@ -250 +92 @@ To create an Amazon EC2 instance, use the following steps. - 3. For **Instance type** , choose one of the types listed in Amazon EC2 instance types for AWS Blu Age Runtime (on Amazon EC2). + 3. For **Instance type** , choose an EC2 available instance type. @@ -290 +132 @@ To install the additional webapps delivered alongside the AWS Blu Age Runtime ar - 3. Choose one of the instance types listed in Amazon EC2 instance types for AWS Blu Age Runtime (on Amazon EC2). + 3. Choose an EC2 instance type. @@ -301 +143 @@ To install the additional webapps delivered alongside the AWS Blu Age Runtime ar - 2. As mentioned previously, a security group is created on your behalf. You can use that security group when you create the Amazon VPC endpoint. + 2. As mentioned previously, a security group is created on your behalf. @@ -305 +147 @@ To install the additional webapps delivered alongside the AWS Blu Age Runtime ar - 4. Choose one of the instance types listed in Amazon EC2 instance types for AWS Blu Age Runtime (on Amazon EC2). + 4. Choose an EC2 instance type.