AWS sap documentation change
Summary
Updated STONITH resource agent name to specify 'fence_aws' for SLES 15 SP5+ and retain 'external/ec2' for older versions.
Security assessment
The change clarifies agent naming conventions but doesn't address a security vulnerability or weakness. STONITH fencing prevents split-brain scenarios in clusters, but this update is operational documentation refinement without security implications.
Diff
diff --git a/sap/latest/sap-netweaver/sap-nw-pacemaker-sles-infra-setup.md b/sap/latest/sap-netweaver/sap-nw-pacemaker-sles-infra-setup.md index 962d3bd21..d02c4f95e 100644 --- a//sap/latest/sap-netweaver/sap-nw-pacemaker-sles-infra-setup.md +++ b//sap/latest/sap-netweaver/sap-nw-pacemaker-sles-infra-setup.md @@ -40 +40 @@ For more information, see [IAM roles for Amazon EC2](https://docs.aws.amazon.com -The SLES STONITH resource agent (external/ec2) requires permission to start and stop both the nodes of the cluster. Create a policy as shown in the following example. Attach this policy to the IAM role assigned to both Amazon EC2 instances in the cluster. +The SLES STONITH resource agent (`fence_aws` for SLES 15 SP5 and above, or `external/ec2` for older releases) requires permission to start and stop both the nodes of the cluster. Create a policy as shown in the following example. Attach this policy to the IAM role assigned to both Amazon EC2 instances in the cluster.