AWS pcs medium security documentation change
Summary
Added scheduler audit logs separation and clarified HTTP endpoint disablement
Security assessment
Disabling unauthenticated HTTP endpoints by default addresses potential information disclosure risks. Audit log separation improves security monitoring capabilities.
Diff
diff --git a/pcs/latest/userguide/slurm-versions_release-notes.md b/pcs/latest/userguide/slurm-versions_release-notes.md index 4eb98c118..241a73030 100644 --- a//pcs/latest/userguide/slurm-versions_release-notes.md +++ b//pcs/latest/userguide/slurm-versions_release-notes.md @@ -12,0 +13,2 @@ This topic describes important changes for each Slurm version currently supporte + * Scheduler audit logs are now delivered separately through the `PCS_SCHEDULER_AUDIT_LOGS` log type, simplifying troubleshooting and auditing with independent control over log delivery. For more information, see [Scheduler audit logs in AWS PCS](https://docs.aws.amazon.com/pcs/latest/userguide/monitoring_scheduler-audit-logs.html). + @@ -19 +21 @@ This topic describes important changes for each Slurm version currently supporte - * `CommunicationParameters=disable_http` is set by default to disable unauthenticated HTTP endpoints (metrics and health probes) introduced in Slurm 25.11. + * `CommunicationParameters=disable_http` is set by default to disable HTTP endpoints (metrics and health probes) introduced in Slurm 25.11. To re-enable these endpoints, set `CommunicationParameters=enable_http`. For more information, see [Slurm metrics in AWS PCS](https://docs.aws.amazon.com/pcs/latest/userguide/slurm-metrics.html).