AWS Security ChangesHomeSearch

AWS sap documentation change

Service: sap · 2026-05-10 · Documentation low

File: sap/latest/sap-hana/sap-hana-pacemaker-sles-infra-setup.md

Summary

Updated STONITH resource agent details to specify fence_aws for SLES 15 SP5+ and external/ec2 for older releases

Security assessment

Clarifies fencing agent versions without addressing any specific vulnerability. Maintains security documentation accuracy for cluster node isolation mechanisms.

Diff

diff --git a/sap/latest/sap-hana/sap-hana-pacemaker-sles-infra-setup.md b/sap/latest/sap-hana/sap-hana-pacemaker-sles-infra-setup.md
index 7d34fe05f..30eecb36e 100644
--- a//sap/latest/sap-hana/sap-hana-pacemaker-sles-infra-setup.md
+++ b//sap/latest/sap-hana/sap-hana-pacemaker-sles-infra-setup.md
@@ -36 +36 @@ For more information, see [IAM roles for Amazon EC2](https://docs.aws.amazon.com
-The SLES STONITH resource agent (external/ec2) requires permission to start and stop both the nodes of the cluster. Create a policy as shown in the following example. Attach this policy to the IAM role assigned to both Amazon EC2 instances in the cluster.
+The SLES STONITH resource agent (`fence_aws` for SLES 15 SP5 and above, or `external/ec2` for older releases) requires permission to start and stop both the nodes of the cluster. Create a policy as shown in the following example. Attach this policy to the IAM role assigned to both Amazon EC2 instances in the cluster.