AWS drs documentation change
Summary
Updated Windows agent installation documentation with corrected file names, added explicit download instructions with PowerShell command, added TLS 1.2 requirement note for older Windows Server versions, fixed typos, and added section about secured network installations.
Security assessment
The changes add security documentation by explicitly mentioning TLS 1.2 requirement for PowerShell downloads on older Windows Server versions (2016 or older) and adding a note about additional configurations needed for secured networks. However, there is no evidence this addresses a specific security vulnerability or incident - these appear to be routine documentation improvements for security best practices.
Diff
diff --git a/drs/latest/userguide/windows-agent.md b/drs/latest/userguide/windows-agent.md index f5539abb7..30f9ea05f 100644 --- a//drs/latest/userguide/windows-agent.md +++ b//drs/latest/userguide/windows-agent.md @@ -6,0 +7,2 @@ +Downloading the installerInstalling the agent + @@ -9 +11 @@ -To install the AWS Replication Agent on a Windows source server, you should ensure that your source meets all the requirements list in the [supported Windows operating systems](./Supported-Operating-Systems-Windows.html) documentation. +To install the AWS Replication Agent on a Windows source server, you should ensure that your source meets all the requirements listed in the [supported Windows operating systems](./Supported-Operating-Systems-Windows.html) documentation. @@ -20 +22,3 @@ Prior to installing the AWS Replication Agent, please ensure that you are aware -Before installing the AWS Replication Agent, `AWSReplicationWindowsInstaller.exe`, it needs to be downloaded. Copy or distribute the downloaded agent installer to each Windows source server that you want to add to AWS Elastic Disaster Recovery. +## Downloading the installer + +Before installing the AWS Replication Agent, `AwsReplicationWindowsInstaller.exe`, it needs to be downloaded. Copy or distribute the downloaded agent installer to each Windows source server that you want to add to AWS Elastic Disaster Recovery. @@ -30 +34,6 @@ Replace `<REGION>` with the AWS Region into which you are replicating. -The following is an example URL for downloading the installer file from the us-east-1 region : +The following is an example command for downloading the installer file from the us-east-1 region: + +###### Note + +If you are using Windows Server 2016 or older, you may need to enable TLS 1.2 in PowerShell before downloading: `[System.Net.ServicePointManager]::SecurityProtocol = 'TLS12'` + @@ -31,0 +41 @@ The following is an example URL for downloading the installer file from the us-e + Invoke-WebRequest "https://aws-elastic-disaster-recovery-us-east-1.s3.us-east-1.amazonaws.com/latest/windows/AwsReplicationWindowsInstaller.exe" -OutFile .\AwsReplicationWindowsInstaller.exe @@ -33 +43 @@ The following is an example URL for downloading the installer file from the us-e - https://aws-elastic-disaster-recovery-us-east-1.s3.us-east-1.amazonaws.com/latest/windows/AwsReplicationWindowsInstaller.exe +The command line indicates when the installer has been successfully downloaded. @@ -39,2 +48,0 @@ The following is an example URL for downloading the installer file from the us-e - * If you are using a Windows Servers of versions 2016 or older, and are using PowerShell to download the installer, you need to enable TLS 1.2: `[System.Net.ServicePointManager]::SecurityProtocol = 'TLS12'` - @@ -45 +53 @@ The following is an example URL for downloading the installer file from the us-e -If you need to validate the installer hash, the correct hash is here: `https://aws-elastic-disaster-recovery-hashes-<region>.s3.amazonaws.com/latest/windows_legacy/AwsReplicationWindows2012LegacyInstaller.exe.sha512` (replace <region> with the AWS Region into which you are replicating. +If you need to validate the installer hash, the correct hash is here: `https://aws-elastic-disaster-recovery-hashes-<REGION>.s3.<REGION>.amazonaws.com/latest/windows_legacy/windows_2012_legacy/AwsReplicationWindows2012LegacyInstaller.exe.sha512` (replace <REGION> with the AWS Region into which you are replicating.) @@ -261 +269,5 @@ Africa (Cape Town) | af-south-1 | https://aws-elastic-disaster-recovery-hashes-a - 1. Run the agent installer file `AWSReplicationWindowsInstaller.exe` as an Administrator. +## Installing the agent + + 1. Run the agent installer file `AwsReplicationWindowsInstaller.exe` as an Administrator. + + .\AwsReplicationWindowsInstaller.exe @@ -266,0 +279,4 @@ The installer confirms that the installation of the AWS Replication Agent has st +###### Note + +To install the agent on a secured network, [learn about the additional required configurations](./installing-agent-blocked.html). + @@ -276 +292 @@ The installer confirms that the installation of the AWS Replication Agent has st -You can also enter these values as part of the installation script command parameters. If you do not enter these parameters as part of the installation script, you are prompted to enter them one by one as described above. (for example: ` AwsReplicationWindowsInstaller.exe --region regionname --aws-access-key-id AKIAIOSFODNN7EXAMPLE --aws-secret-access-key wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY)` +You can also enter these values as part of the installation script command parameters. If you do not enter these parameters as part of the installation script, you are prompted to enter them one by one as described above. (for example: `.\AwsReplicationWindowsInstaller.exe --region regionname --aws-access-key-id AKIAIOSFODNN7EXAMPLE --aws-secret-access-key wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY`) @@ -287,3 +303,3 @@ If you require additional customization, you can add a variety of parameters to - Choose the disks you want to replication. Your disks are: c: - To replication some of the disks, type the path of the disks, separated with a comma (for example, C:,D:). - To replication all disks, press Enter: + Choose the disks you want to replicate. Your disks are: c: + To replicate some of the disks, type the path of the disks, separated with a comma (for example, C:,D:). + To replicate all disks, press Enter: @@ -295,4 +311,4 @@ To replicate some of the disks, type the path of the disks, separated by a comma - Choose the disks you want to replication. Your disks are: c: - To replication some of the disks, type the path of the disks, separated with a comma (for example, C:,D:). - To replication all disks, press Enter: - Disk to replciate identified: c:0 of size 30GiB + Choose the disks you want to replicate. Your disks are: c: + To replicate some of the disks, type the path of the disks, separated with a comma (for example, C:,D:). + To replicate all disks, press Enter: + Disk to replicate identified: c:0 of size 30GiB @@ -304,4 +320,4 @@ The installer confirms that all of the disks were successfully identified. - Choose the disks you want to replication. Your disks are: c: - To replication some of the disks, type the path of the disks, separated with a comma (for example, C:,D:). - To replication all disks, press Enter: - Disk to replciate identified: c:0 of size 30GiB + Choose the disks you want to replicate. Your disks are: c: + To replicate some of the disks, type the path of the disks, separated with a comma (for example, C:,D:). + To replicate all disks, press Enter: + Disk to replicate identified: c:0 of size 30GiB @@ -312 +328 @@ The installer confirms that all of the disks were successfully identified. -When identifying specific disks for replication, do not use apostrophes, brackets, or disk paths that do not exist. Type only existing disk paths. Each disk that you selected for replication is displayed with the caption **Disk to replicate identified**. However, the displayed list of identified disks for replication may differ from the data you entered. This difference can due to several reasons: +When identifying specific disks for replication, do not use apostrophes, brackets, or disk paths that do not exist. Type only existing disk paths. Each disk that you selected for replication is displayed with the caption **Disk to replicate identified**. However, the displayed list of identified disks for replication may differ from the data you entered. This difference can be due to several reasons: @@ -322 +338 @@ When identifying specific disks for replication, do not use apostrophes, bracket -If disks are disconnected from a server, AWS Elastic Disaster Recovery can no longer replicate them, so they are removed from the list of replicated disks. When they are re-connected, the AWS Replication Agent cannot know that these were the same disks that were disconnected and therefore does not add them automatically. To add the disks after they are reconnected, rerun the AWS Replication Agent installer on the server. +If disks are disconnected from a server, AWS Elastic Disaster Recovery can no longer replicate them, so they are removed from the list of replicated disks. When they are reconnected, the AWS Replication Agent cannot know that these were the same disks that were disconnected and therefore does not add them automatically. To add the disks after they are reconnected, rerun the AWS Replication Agent installer on the server. @@ -333 +349 @@ Note that the returned disks need to be replicated from the beginning. Any disk - 5. Once the AWS Replication Agent is installed, the server is added to the Elastic Disaster Recovery Console and undergoes the initial sync process. The installer provides the source server's ID. + 5. Once the AWS Replication Agent is installed, the server is added to the AWS Elastic Disaster Recovery console and undergoes the initial sync process. The installer provides the source server's ID.