AWS ground-station documentation change
Summary
Updated agent installation instructions to recommend using 'latest' path for automatic security patches and bug fixes
Security assessment
This change emphasizes using the 'latest' path to ensure automatic security patches and bug fixes. While it promotes security best practices (keeping software updated), there is no evidence it addresses a specific security vulnerability. The change adds security guidance about maintaining updated agents.
Diff
diff --git a/ground-station/latest/gs-agent-ug/installing-the-agent.md b/ground-station/latest/gs-agent-ug/installing-the-agent.md index 97c1527b0..5b9e2f1cc 100644 --- a//ground-station/latest/gs-agent-ug/installing-the-agent.md +++ b//ground-station/latest/gs-agent-ug/installing-the-agent.md @@ -63 +63,5 @@ Steps in this section must be completed if you did **not** choose the AWS Ground -The AWS Ground Station Agent is available from region specific S3 buckets and can be downloaded onto support EC2 instances using the AWS command line (CLI) from `s3://groundstation-wb-digif-software-${AWS::Region}/aws-groundstation-agent/latest/amazon_linux_2_x86_64/aws-groundstation-agent.rpm` where ${AWS::Region} refers to one of the supported [ AWS Ground Station Console and Data Delivery Regions](https://docs.aws.amazon.com/ground-station/latest/ug/aws-ground-station-antenna-locations.html). +The AWS Ground Station Agent is available from region specific S3 buckets and can be downloaded onto supported EC2 instances using the AWS command line (CLI). We recommend always downloading from the `latest` path to ensure you are running the most current version of the agent. The download path is `s3://groundstation-wb-digif-software-${AWS::Region}/aws-groundstation-agent/latest/amazon_linux_2_x86_64/aws-groundstation-agent.rpm` where ${AWS::Region} refers to one of the supported [ AWS Ground Station Console and Data Delivery Regions](https://docs.aws.amazon.com/ground-station/latest/ug/aws-ground-station-antenna-locations.html). + +###### Note + +Always use the `latest` path rather than hard-coding a specific version number in your download scripts. Using the `latest` path ensures your instances automatically receive security patches and bug fixes when they are provisioned. @@ -71 +75 @@ Example: Download the latest rpm version from AWS region us-east-2 locally to th -If you need to download a specific version of the AWS Ground Station Agent, you can download it from the version specific folder in the S3 bucket. +If you need to download a specific version of the AWS Ground Station Agent for troubleshooting or rollback purposes, you can download it from the version specific folder in the S3 bucket. This is not recommended for normal operations.