AWS sap documentation change
Summary
Updated documentation for AWS Backint agent installation: 1) Fixed prerequisite link references, 2) Added '$' prompt symbols to all shell commands for clarity, 3) Consolidated multi-line commands into single-line equivalents, 4) Corrected S3 bucket references in GovCloud regions.
Security assessment
The changes are primarily documentation improvements (command formatting and link corrections) without addressing vulnerabilities. The IAM policy reference update maintains existing security documentation but doesn't introduce new security content. No evidence of patching vulnerabilities or addressing security incidents exists in the diff.
Diff
diff --git a/sap/latest/sap-hana/aws-backint-agent-s3-installing-configuring.md b/sap/latest/sap-hana/aws-backint-agent-s3-installing-configuring.md index 848c3d917..3d35720fb 100644 --- a//sap/latest/sap-hana/aws-backint-agent-s3-installing-configuring.md +++ b//sap/latest/sap-hana/aws-backint-agent-s3-installing-configuring.md @@ -102 +102 @@ Disable any existing backup processes (including scheduled log backups) before c - 6. Under **Targets** , select the method for your target instance to use to install the AWS Backint agent, and then choose the instance on which to install it. If you are not able to find your instance in the list, verify that you have followed all of the steps in the [prerequisites](./aws-backint-agent-amazon-s3.html#aws-backint-agent-s3-prerequisites). + 6. Under **Targets** , select the method for your target instance to use to install the AWS Backint agent, and then choose the instance on which to install it. If you are not able to find your instance in the list, verify that you have followed all of the steps in the [prerequisites](./aws-backint-agent-s3-prerequisites.html). @@ -147 +147 @@ Disable any existing backup processes (including scheduled log backups) before c - cd /tmp + $ cd /tmp @@ -151 +151 @@ Disable any existing backup processes (including scheduled log backups) before c - sudo aws s3 cp s3://awssap-backint-agent/binary/latest/install-aws-backint-agent /tmp/ --region us-east-1 + $ sudo aws s3 cp s3://awssap-backint-agent/binary/latest/install-aws-backint-agent /tmp/ --region us-east-1 @@ -155 +155 @@ or - sudo wget https://s3.amazonaws.com/awssap-backint-agent/binary/latest/install-aws-backint-agent -O /tmp/install-aws-backint-agent + $ sudo wget https://s3.amazonaws.com/awssap-backint-agent/binary/latest/install-aws-backint-agent -O /tmp/install-aws-backint-agent @@ -159 +159 @@ or -If you encounter permission issues while downloading the AWS Backint installer using the AWS CLI, check your IAM policy and ensure that your policies allow for downloading objects from the `awssap-backint-agent` bucket. See the [Identity and Access Management](./aws-backint-agent-amazon-s3.html#aws-backint-agent-iam) section of this documentation for details. +If you encounter permission issues while downloading the AWS Backint installer using the AWS CLI, check your IAM policy and ensure that your policies allow for downloading objects from the `awssap-backint-agent` bucket. See the [Identity and Access Management](./aws-backint-agent-s3-prerequisites.html#aws-backint-agent-iam) section of this documentation for details. @@ -163 +163 @@ If you encounter permission issues while downloading the AWS Backint installer u - sudo aws s3 cp s3://awssap-backint-agent-us-gov-east-1/binary/latest/install-aws-backint-agent /tmp/ --region us-gov-east-1 + $ sudo aws s3 cp s3://awssap-backint-agent-us-gov-east-1/binary/latest/install-aws-backint-agent /tmp/ --region us-gov-east-1 @@ -165 +165 @@ If you encounter permission issues while downloading the AWS Backint installer u - sudo aws s3 cp s3://awssap-backint-agent-us-gov-west-1/binary/latest/install-aws-backint-agent /tmp/ --region us-gov-west-1 + $ sudo aws s3 cp s3://awssap-backint-agent-us-gov-west-1/binary/latest/install-aws-backint-agent /tmp/ --region us-gov-west-1 @@ -169 +169 @@ or - sudo wget https://awssap-backint-agent-us-gov-east-1.s3.us-gov-east-1.amazonaws.com/binary/latest/install-aws-backint-agent -O /tmp/install-aws-backint-agent + $ sudo wget https://awssap-backint-agent-us-gov-east-1.s3.us-gov-east-1.amazonaws.com/binary/latest/install-aws-backint-agent -O /tmp/install-aws-backint-agent @@ -171 +171 @@ or - sudo wget https://awssap-backint-agent-us-gov-west-1.s3.us-gov-west-1.amazonaws.com/binary/latest/install-aws-backint-agent -O /tmp/install-aws-backint-agent + $ sudo wget https://awssap-backint-agent-us-gov-west-1.s3.us-gov-west-1.amazonaws.com/binary/latest/install-aws-backint-agent -O /tmp/install-aws-backint-agent @@ -175 +175 @@ or - sudo python install-aws-backint-agent -h + $ sudo python install-aws-backint-agent -h @@ -179 +179 @@ or - sudo python install-aws-backint-agent + $ sudo python install-aws-backint-agent @@ -185 +185 @@ Run the installer with the `-l` flag if you want the installer to get the AWS Ba - sudo python install-aws-backint-agent -l /tmp/backint/aws-backint-agent.tar.gz + $ sudo python install-aws-backint-agent -l /tmp/backint/aws-backint-agent.tar.gz @@ -187 +187 @@ Run the installer with the `-l` flag if you want the installer to get the AWS Ba - sudo python install-aws-backint-agent -l s3://<S3 bucket>/aws-backint-agent.tar.gz + $ sudo python install-aws-backint-agent -l s3://<S3 bucket>/aws-backint-agent.tar.gz @@ -189 +189 @@ Run the installer with the `-l` flag if you want the installer to get the AWS Ba - sudo python install-aws-backint-agent -l https://<S3 bucket>.s3.amazonaws.com/aws-backint-agent.tar.gz + $ sudo python install-aws-backint-agent -l https://<S3 bucket>.s3.amazonaws.com/aws-backint-agent.tar.gz @@ -268 +268 @@ If you want to generate the response file programmatically instead of using AWS - sudo python install-aws-backint-agent -g "s3_bucket_owner_account_id = 111122223333,s3_bucket_name = <S3 bucket>,s3_bucket_region = <us-east-1>,hana_sid = TST,s3_sse_kms_arn = arn:aws:kms:<us-east-1>:111122223333:key/1abcd9b9-ab12-1a2a-1abc-12345abc12a3,s3_bucket_folder = myfolder,installation_directory = /hana/shared/,modify_global_ini = sql" -f myresponse.rsp + $ sudo python install-aws-backint-agent -g "s3_bucket_owner_account_id = 111122223333,s3_bucket_name = <S3 bucket>,s3_bucket_region = <us-east-1>,hana_sid = TST,s3_sse_kms_arn = arn:aws:kms:<us-east-1>:111122223333:key/1abcd9b9-ab12-1a2a-1abc-12345abc12a3,s3_bucket_folder = myfolder,installation_directory = /hana/shared/,modify_global_ini = sql" -f myresponse.rsp @@ -279 +279 @@ Run the following command to execute the installer using the generated response - sudo python install-aws-backint-agent -m silent -f backint-agent-install-YYYYMMDDHHMMSS.rsp -a yes + $ sudo python install-aws-backint-agent -m silent -f backint-agent-install-YYYYMMDDHHMMSS.rsp -a yes @@ -284 +284 @@ If you want to choose the location from which to install the agent, run the comm - sudo python install-aws-backint-agent -f aws-backint-agent-install-YYYYMMDDHHMMSS.rsp -m silent -a yes -d -l /tmp/backint/aws-backint-agent.tar.gz + $ sudo python install-aws-backint-agent -f aws-backint-agent-install-YYYYMMDDHHMMSS.rsp -m silent -a yes -d -l /tmp/backint/aws-backint-agent.tar.gz @@ -461,2 +461 @@ Run the following commands to move the volume type TENANT DB logs. In the exampl - cp /hana/shared/aws-backint-agent/aws-backint-agent-config.yaml \ - /hana/shared/aws-backint-agent/aws-backint-agent-config-logs.yaml + $ cp /hana/shared/aws-backint-agent/aws-backint-agent-config.yaml /hana/shared/aws-backint-agent/aws-backint-agent-config-logs.yaml @@ -472,2 +471 @@ Run the following commands to move the volume type TENANT DB logs. In the exampl - ln -s /hana/shared/aws-backint-agent/aws-backint-agent-config-logs.yaml \ - /usr/sap/<SID>/SYS/global/hdb/opt/hdbconfig/aws-backint-agent-config-logs.yaml + $ ln -s /hana/shared/aws-backint-agent/aws-backint-agent-config-logs.yaml /usr/sap/<SID>/SYS/global/hdb/opt/hdbconfig/aws-backint-agent-config-logs.yaml @@ -592,2 +590 @@ Run the following commands to move the `catalog` type tenant database logs. In t - cp /hana/shared/aws-backint-agent/aws-backint-agent-config.yaml \ - /hana/shared/aws-backint-agent/aws-backint-agent-config-catalog.yaml + $ cp /hana/shared/aws-backint-agent/aws-backint-agent-config.yaml /hana/shared/aws-backint-agent/aws-backint-agent-config-catalog.yaml @@ -603,2 +600 @@ Run the following commands to move the `catalog` type tenant database logs. In t - ln -s /hana/shared/aws-backint-agent/aws-backint-agent-config-catalog.yaml \ - /usr/sap/<SID>/SYS/global/hdb/opt/hdbconfig/aws-backint-agent-config-catalog.yaml + $ ln -s /hana/shared/aws-backint-agent/aws-backint-agent-config-catalog.yaml /usr/sap/<SID>/SYS/global/hdb/opt/hdbconfig/aws-backint-agent-config-catalog.yaml @@ -670 +666 @@ Ensure that there is no backup process running, then run the following command t - vi /hana/shared/aws-backint-agent/aws-backint-agent-config.yaml + $ vi /hana/shared/aws-backint-agent/aws-backint-agent-config.yaml @@ -709 +705 @@ To display the backint version and the current AWS Backint agent version that it - /usr/sap/<SID>/SYS/global/hdb/opt/hdbbackint -v + $ /usr/sap/<SID>/SYS/global/hdb/opt/hdbbackint -v @@ -716 +712 @@ For instance, running the preceding command on a system with `<SID>` as `HDB` re - /usr/sap/<SID>/SYS/global/hdb/opt/hdbbackint -v + $ /usr/sap/<SID>/SYS/global/hdb/opt/hdbbackint -v @@ -754 +750 @@ _AWS GovCloud (US-West) previous version_ – `s3://awssap-backint-agent-us-gov- - cd /tmp + $ cd /tmp @@ -756 +752 @@ _AWS GovCloud (US-West) previous version_ – `s3://awssap-backint-agent-us-gov- - mkdir agent_download && cd agent_download + $ mkdir agent_download && cd agent_download @@ -758 +754 @@ _AWS GovCloud (US-West) previous version_ – `s3://awssap-backint-agent-us-gov- - aws s3 cp s3://awssap-backint-agent/binary/<agent-version>/aws-backint-agent.tar.gz aws-backint-agent.tar.gz --region <us-east-1> + $ aws s3 cp s3://awssap-backint-agent/binary/<agent-version>/aws-backint-agent.tar.gz aws-backint-agent.tar.gz --region <us-east-1> @@ -776 +772 @@ _AWS GovCloud (US-West) previous version_ – `s3://awssap-backint-agent-us-gov- - tar -xf aws-backint-agent.tar.gz + $ tar -xf aws-backint-agent.tar.gz @@ -782 +778 @@ _AWS GovCloud (US-West) previous version_ – `s3://awssap-backint-agent-us-gov- - cp <INSTALLATION_DIR>/aws-backint-agent/aws-backint-agent <INSTALLATION_DIR>/aws-backint-agent/aws-backint-agent. <mmddyy> + $ cp <INSTALLATION_DIR>/aws-backint-agent/aws-backint-agent <INSTALLATION_DIR>/aws-backint-agent/aws-backint-agent. <mmddyy> @@ -786 +782 @@ _AWS GovCloud (US-West) previous version_ – `s3://awssap-backint-agent-us-gov- - cp aws-backint-agent <INSTALLATION_DIR>/aws-backint-agent/aws-backint-agent + $ cp aws-backint-agent <INSTALLATION_DIR>/aws-backint-agent/aws-backint-agent @@ -790 +786 @@ _AWS GovCloud (US-West) previous version_ – `s3://awssap-backint-agent-us-gov- - cd <INSTALLATION_DIR>/aws-backint-agent + $ cd <INSTALLATION_DIR>/aws-backint-agent @@ -792 +788 @@ _AWS GovCloud (US-West) previous version_ – `s3://awssap-backint-agent-us-gov- - chmod 770 aws-backint-agent + $ chmod 770 aws-backint-agent @@ -794 +790 @@ _AWS GovCloud (US-West) previous version_ – `s3://awssap-backint-agent-us-gov- - chown <sid>adm:sapsys aws-backint-agent + $ chown <sid>adm:sapsys aws-backint-agent @@ -872 +868 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Amazon S3 +Prerequisites