AWS deadline-cloud documentation change
Summary
Added guidance to use host configuration scripts for mounting VPC resources and updated links to security documentation.
Security assessment
The change references secure credential management via AWS Secrets Manager and reinforces security considerations for shared resources, but doesn't address a specific vulnerability.
Diff
diff --git a/deadline-cloud/latest/developerguide/smf-vpc.md b/deadline-cloud/latest/developerguide/smf-vpc.md index c0d50bff3..33ae64f69 100644 --- a//deadline-cloud/latest/developerguide/smf-vpc.md +++ b//deadline-cloud/latest/developerguide/smf-vpc.md @@ -74,0 +75,2 @@ This domain is private and only accessible by workers (not from the internet or +To mount or configure access to the VPC resource on your workers, use a [host configuration script](./smf-admin.html). Host configuration scripts run with administrator privileges when workers start, allowing you to mount file systems, configure network settings, or perform other setup tasks. + @@ -77 +79 @@ This domain is private and only accessible by workers (not from the internet or -For resources requiring authentication, store credentials securely in AWS Secrets Manager, access secrets from your host configuration scripts or job scripts, and implement appropriate file system permissions to control access. Consider security implications when sharing resources across multiple fleets. For example, if two fleets are connected to the same shared storage, jobs that run on one fleet might be able to access assets created from the other fleet. +For resources requiring authentication, store credentials securely in AWS Secrets Manager, access secrets from your [host configuration scripts](./smf-admin.html) or job scripts, and implement appropriate file system permissions to control access. Consider security implications when sharing resources across multiple fleets. For example, if two fleets are connected to the same shared storage, jobs that run on one fleet might be able to access assets created from the other fleet. @@ -119 +121 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Run admin scripts +Service-managed fleets