AWS managedservices documentation change
Summary
Added new automatic remediation for ONTAP volume capacity issues, including a new alert type (AMSFSXONTAPVolumeCapacityUtilization) and detailed remediation procedures for FSx for NetApp ONTAP volumes.
Security assessment
This change adds operational documentation for a new auto-remediation feature focused on storage capacity management for FSx for ONTAP volumes. While storage capacity issues could indirectly impact availability (a security concern), there is no evidence in the diff that this addresses a specific security vulnerability or weakness. The documentation describes standard operational procedures for expanding storage capacity.
Diff
diff --git a/managedservices/latest/accelerate-guide/auto-remediation.md b/managedservices/latest/accelerate-guide/auto-remediation.md index 9a4a73ba0..c6868f008 100644 --- a//managedservices/latest/accelerate-guide/auto-remediation.md +++ b//managedservices/latest/accelerate-guide/auto-remediation.md @@ -5 +5 @@ -EC2 status check failure: Remediation automation notesEC2 volume usage remediation automationAmazon RDS low storage event remediation automation +EC2 status check failure: Remediation automation notesEC2 volume usage remediation automationAmazon RDS low storage event remediation automationONTAP volume capacity remediation automation @@ -19,0 +20,5 @@ RDS-Storage-Capacity | Less than 1GB is left at the allocated storage for the DB +AMSFSXONTAPVolumeCapacityUtilization | The Amazon FSx for NetApp ONTAP volume has consumed more than the default allocated storage (80%). | FSx for ONTAP Volume Capacity Utilization is greater than 80% for two hours (default value). | AMS automatic remediation first validates that the volume lifecycle state is in a modifiable state, then extends volume size by 10% while verifying against the file system maximum capacity. If the file system lacks sufficient storage capacity for the volume expansion, both the volume and file system are expanded together. This expansion is limited to a maximum of three times within any seven-day period. The maximum storage limit that AMS Automation expands to is 5120 GiB. + +###### Note + +If iSCSI LUN is configured on top of the volume, expand the iSCSI LUN at the operating system level. For more information, see [Why is my FSx for ONTAP LUN in read-only mode?](https://repost.aws/knowledge-center/fsx-ontap-lun-in-read-only-mode) @@ -91,0 +97,17 @@ How AWS Managed Services (AMS) auto-remediation works with Amazon RDS low storag +## ONTAP volume capacity remediation automation + +How AWS Managed Services (AMS) auto-remediation works with ONTAP volume capacity issues: + + * Before extending the volume, the automation validates that the volume lifecycle state is in a modifiable state. + + * The automation extends the volume size by 10% while verifying against the file system maximum capacity. + + * If the file system doesn't have sufficient storage capacity to accommodate the volume expansion, both the volume and file system capacity are expanded. + + * Remediation is limited to no more than three updates within a seven-day period. + + * If iSCSI LUN is configured on top of the volume, you must manually expand the iSCSI LUN at the OS level after the automatic remediation completes. For more information, see [Why is my FSx for ONTAP LUN in read-only mode?](https://repost.aws/knowledge-center/fsx-ontap-lun-in-read-only-mode) + + + +