AWS pcs medium security documentation change

Service: pcs · 2025-12-10 · Security-related medium

File: pcs/latest/userguide/working-with_ami_custom_install-slurm.md

Summary

Updated Slurm installer version from 25.05.4 to 25.05.5 with new download URLs, signature verification, and timestamps

Security assessment

Version update includes new GPG signature and timestamp, indicating a security patch. The explicit instruction to verify signatures and checksums before installation addresses potential supply chain security risks.

Diff

diff --git a/pcs/latest/userguide/working-with_ami_custom_install-slurm.md b/pcs/latest/userguide/working-with_ami_custom_install-slurm.md
index ff63883bc..fe4350886 100644
--- a//pcs/latest/userguide/working-with_ami_custom_install-slurm.md
+++ b//pcs/latest/userguide/working-with_ami_custom_install-slurm.md
@@ -19,2 +19,2 @@ If you have an AMI with a previous version of the Slurm software installed on it
-        curl https://aws-pcs-repo-region.s3.region.amazonaws.com/aws-pcs-slurm/aws-pcs-slurm-25.05-installer-25.05.4-1.tar.gz \
-         -o aws-pcs-slurm-25.05-installer-25.05.4-1.tar.gz
+        curl https://aws-pcs-repo-region.s3.region.amazonaws.com/aws-pcs-slurm/aws-pcs-slurm-25.05-installer-25.05.5-1.tar.gz \
+         -o aws-pcs-slurm-25.05-installer-25.05.5-1.tar.gz
@@ -49,2 +49,2 @@ Don't run the Slurm installation script if the fingerprint doesn't match. Contac
-                wget https://aws-pcs-repo-region.s3.region.amazonaws.com/aws-pcs-slurm/aws-pcs-slurm-25.05-installer-25.05.4-1.tar.gz.sig && \
-             gpg --verify ./aws-pcs-slurm-25.05-installer-25.05.4-1.tar.gz.sig
+                wget https://aws-pcs-repo-region.s3.region.amazonaws.com/aws-pcs-slurm/aws-pcs-slurm-25.05-installer-25.05.5-1.tar.gz.sig && \
+             gpg --verify ./aws-pcs-slurm-25.05-installer-25.05.5-1.tar.gz.sig
@@ -54,2 +54,2 @@ The output should be similar to the following:
-                gpg: assuming signed data in './aws-pcs-slurm-25.05-installer-25.05.4-1.tar.gz'
-        gpg: Signature made Fri 24 Oct 2025 05:05:11 PM UTC using RSA key ID ECC0AE5C
+                gpg: assuming signed data in './aws-pcs-slurm-25.05-installer-25.05.5-1.tar.gz'
+        gpg: Signature made Fri 14 Nov 2025 11:35:15 AM UTC using RSA key ID ECC0AE5C
@@ -70 +70 @@ Don't run the Slurm installation script if the fingerprint doesn't match. Contac
-        tar -xf aws-pcs-slurm-25.05-installer-25.05.4-1.tar.gz && \
+        tar -xf aws-pcs-slurm-25.05-installer-25.05.5-1.tar.gz && \
@@ -83,2 +83,2 @@ The output should be similar to the following:
-        SLURM_INSTALL_DATE='Mon Nov 3 14:23:38 UTC 2025'
-    SLURM_VERSION='25.05.4'
+        SLURM_INSTALL_DATE='Fri Nov 14 15:15:37 UTC 2025'
+    SLURM_VERSION='25.05.5'