AWS parallelcluster documentation change
Summary
Added four new IAM permissions required for login nodes management: autoscaling:DeleteTags, autoscaling:CreateOrUpdateTags, elasticloadbalancing:RemoveTags, and elasticloadbalancing:ModifyTargetGroup
Security assessment
This change adds documentation about required IAM permissions for managing login nodes. While IAM permissions are security-related, there's no evidence this addresses a specific security vulnerability. The change appears to be adding missing permissions documentation for proper functionality.
Diff
diff --git a/parallelcluster/latest/ug/login-nodes-permissions.md b/parallelcluster/latest/ug/login-nodes-permissions.md index 3c27c2f67..8a022babf 100644 --- a//parallelcluster/latest/ug/login-nodes-permissions.md +++ b//parallelcluster/latest/ug/login-nodes-permissions.md @@ -29,0 +30,2 @@ In order to manage the login nodes pool the cluster administrator must have the + - autoscaling:DeleteTags + - autoscaling:CreateOrUpdateTags @@ -31,0 +34,2 @@ In order to manage the login nodes pool the cluster administrator must have the + - elasticloadbalancing:RemoveTags + - elasticloadbalancing:ModifyTargetGroup