AWS govcloud-us documentation change
Summary
Updated ROSA documentation to reflect support for Hosted Control Planes (HCP) in AWS GovCloud (US), updated FedRAMP authorization statement, and revised account linking and deployment steps.
Security assessment
The changes update the FedRAMP authorization statement to include both classic and hosted control plane architectures, which is a compliance update. There is no evidence of a security vulnerability being addressed; the changes are primarily feature updates and documentation corrections.
Diff
diff --git a/govcloud-us/latest/UserGuide/govcloud-rosa.md b/govcloud-us/latest/UserGuide/govcloud-rosa.md index 0008a00dc..f0a3ce6f5 100644 --- a//govcloud-us/latest/UserGuide/govcloud-rosa.md +++ b//govcloud-us/latest/UserGuide/govcloud-rosa.md @@ -5 +5 @@ -How Red Hat OpenShift Service on AWS differs for AWS GovCloud (US)Enabling ROSACreating and deploying a ROSA classic cluster into the AWS GovCloud (US) RegionsDocumentation for Red Hat OpenShift Service on AWSExport-controlled content +How Red Hat OpenShift Service on AWS differs for AWS GovCloud (US)Enabling ROSACreating and deploying a ROSA cluster into the AWS GovCloud (US) RegionsDocumentation for Red Hat OpenShift Service on AWSExport-controlled content @@ -13 +13 @@ Red Hat OpenShift Service on AWS (ROSA) is a managed service that you can use to -Red Hat OpenShift Service on AWS has achieved an agency Authority to Operate (ATO) at the FedRAMP High Baseline. +Red Hat OpenShift Service on AWS has achieved FedRAMP High Authorization for classic and hosted control plane architectures. @@ -25 +25 @@ Red Hat OpenShift Service on AWS has achieved an agency Authority to Operate (AT - * ROSA with hosted control planes (HCP) is not yet available in the AWS GovCloud (US) Regions. Only ROSA classic is supported. + * ROSA classic and ROSA with Hosted Control Planes (HCP) are both supported. @@ -66 +66,3 @@ For AWS Organizations users, repeat these steps for each member account that req - 5. Sign up for an AWS GovCloud (US) account. For more information, see [AWS GovCloud (US) Sign Up](https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/getting-started-sign-up.html). + 5. Link your AWS standard account to your [Red Hat account](https://docs.redhat.com/en/documentation/red_hat_openshift_service_on_aws/4/html/tutorials/rosa-activation-and-account-linking). + + 6. Sign up for an AWS GovCloud (US) account. For more information, see [AWS GovCloud (US) Sign Up](https://docs.aws.amazon.com/govcloud-us/latest/UserGuide/getting-started-sign-up.html). @@ -72 +74 @@ Before creating accounts in the AWS GovCloud (US) Regions, make sure that you me - 6. Link your AWS GovCloud account to your AWS standard account. + 7. Link your AWS GovCloud account to your AWS standard account. @@ -74 +76 @@ Before creating accounts in the AWS GovCloud (US) Regions, make sure that you me - 7. Complete the [ROSA FedRAMP access request form](https://console.redhat.com/openshift/create/rosa/govcloud) to initiate onboarding to AWS GovCloud (US). Upon submission, this form will be processed by Red Hat. If Red Hat requires further information, you will receive a follow-up email, or you will receive instructions on how to access the service. + 8. Complete the [ROSA FedRAMP access request form](https://console.redhat.com/openshift/create/rosa/govcloud) to initiate onboarding to AWS GovCloud (US). Upon submission, this form will be processed by Red Hat. If Red Hat requires further information, you will receive a follow-up email, or you will receive instructions on how to access the service. @@ -83 +85 @@ You can use the Red Hat Hybrid Cloud Console on AWS GovCloud (US) to deploy ROSA -## Creating and deploying a ROSA classic cluster into the AWS GovCloud (US) Regions +## Creating and deploying a ROSA cluster into the AWS GovCloud (US) Regions @@ -85 +87 @@ You can use the Red Hat Hybrid Cloud Console on AWS GovCloud (US) to deploy ROSA -After enabling ROSA for AWS GovCloud (US), you can create and deploy ROSA classic clusters into the AWS GovCloud (US) Regions. +After enabling ROSA for AWS GovCloud (US), you can create and deploy ROSA clusters into the AWS GovCloud (US) Regions. @@ -89 +91 @@ After enabling ROSA for AWS GovCloud (US), you can create and deploy ROSA classi -To deploy ROSA classic clusters into the AWS GovCloud (US) Regions, the following prerequisites must be met. +To deploy ROSA clusters into the AWS GovCloud (US) Regions, the following prerequisites must be met. @@ -99 +101 @@ To deploy ROSA classic clusters into the AWS GovCloud (US) Regions, the followin - * You completed the prerequisite actions documented in [Getting started with ROSA classic using AWS PrivateLink](https://docs.aws.amazon.com/rosa/latest/userguide/getting-started-private-link.html#getting-started-private-link-prereqs). + * You completed the prerequisite actions documented in [Getting started with ROSA](https://docs.aws.amazon.com/rosa/latest/userguide/getting-started.html). @@ -137 +139 @@ If you cannot sign in to your AWS GovCloud (US) account or Red Hat Hybrid Cloud -### Create and deploy a ROSA classic cluster that uses AWS PrivateLink +### Create and deploy a ROSA cluster that uses AWS PrivateLink @@ -139 +141 @@ If you cannot sign in to your AWS GovCloud (US) account or Red Hat Hybrid Cloud -Once logged in to your AWS GovCloud (US) and Red Hat Hybrid Cloud Console on AWS GovCloud (US) accounts, you can create a ROSA classic cluster that uses AWS PrivateLink and deploys into the AWS GovCloud (US) Regions. +Once logged in to your AWS GovCloud (US) and Red Hat Hybrid Cloud Console on AWS GovCloud (US) accounts, you can create a ROSA cluster that uses AWS PrivateLink and deploys into the AWS GovCloud (US) Regions. @@ -141 +143 @@ Once logged in to your AWS GovCloud (US) and Red Hat Hybrid Cloud Console on AWS -The procedure is the same for deploying a ROSA classic cluster in AWS GovCloud (US) Regions and AWS standard Regions. For more information, see [Getting started with ROSA using AWS PrivateLink](https://docs.aws.amazon.com/ROSA/latest/userguide/getting-started-private-link.html#getting-started-private-link-step-3) in the _ROSA User Guide_. +The procedure is the same for deploying a ROSA cluster in AWS GovCloud (US) Regions and AWS standard Regions. For more information, see [Getting started with ROSA](https://docs.aws.amazon.com/rosa/latest/userguide/getting-started.html) in the _ROSA User Guide_.