AWS fsx documentation change
Summary
Added S3 protocol requirement troubleshooting and NT_STATUS_PENDING error documentation related to SMB credits
Security assessment
While the changes improve operational documentation for access point creation and domain communication, there is no direct evidence they address security vulnerabilities. The SMB credit reference is about resource management rather than security flaws.
Diff
diff --git a/fsx/latest/ONTAPGuide/troubleshooting-access-points-for-fsxn.md b/fsx/latest/ONTAPGuide/troubleshooting-access-points-for-fsxn.md index 4c7c013e2..6ed3369d5 100644 --- a//fsx/latest/ONTAPGuide/troubleshooting-access-points-for-fsxn.md +++ b//fsx/latest/ONTAPGuide/troubleshooting-access-points-for-fsxn.md @@ -5 +5 @@ -S3 access point creation failed due to file system user identity lookup failureS3 access point creation failed because the volume is not mounted.The file system is unable to handle S3 requestsAccess Denied with default S3 access point permissions for automatically created service roles +S3 access point creation failed due to file system user identity lookup failureS3 access point creation failed because the volume is not mounted.S3 access point creation failed because the S3 protocol is disabled on the SVMThe file system is unable to handle S3 requestsAccess Denied with default S3 access point permissions for automatically created service roles @@ -74,0 +75,4 @@ This error indicates an issue with the vserver's DNS configuration in ONTAP. Run +**`NT_STATUS_PENDING`** + +This error indicates an issue communicating with the domain controller. The underlying cause may be due to a lack of SMB credits. See [NetApp KB](https://kb.netapp.com/on-prem/ontap/da/NAS/NAS-KBs/How_ONTAP_implements_SMB_crediting) for more information. + @@ -78,0 +83,12 @@ S3 access points can only be attached to FSx for ONTAP volumes that are mounted +## S3 access point creation failed because the S3 protocol is disabled on the SVM + +S3 access points require the S3 protocol to be enabled on the Storage Virtual Machine (SVM). To enable the S3 protocol, run the following command in the ONTAP CLI using `fsxadmin`: + + + > vserver add-protocols -vserver svm_name -protocols s3 + +To verify the protocol is enabled: + + + > vserver show -vserver svm_name -fields allowed-protocols,disallowed-protocols +