AWS wickr medium security documentation change
Summary
Removed --network=host flag, added rotation timer environment variable, and updated Docker image location.
Security assessment
Removing --network=host reduces container attack surface. Image migration to ECR enhances supply chain security.
Diff
diff --git a/wickr/latest/adminguide/data-retention-startup-asm-s3-KMS.md b/wickr/latest/adminguide/data-retention-startup-asm-s3-KMS.md index c4906f9d4..b802551d8 100644 --- a//wickr/latest/adminguide/data-retention-startup-asm-s3-KMS.md +++ b//wickr/latest/adminguide/data-retention-startup-asm-s3-KMS.md @@ -14 +14 @@ You can use the Secrets Manager to host the credentials, the Amazon S3 bucket, a - docker run -v /opt/compliance_1234567890_bot:/tmp/compliance_1234567890_bot --network=host \ + docker run -v /opt/compliance_1234567890_bot:/tmp/compliance_1234567890_bot \ @@ -18 +18,2 @@ You can use the Secrets Manager to host the credentials, the Amazon S3 bucket, a - wickr/bot-compliance-cloud:latest + -e WICKRIO_COMP_TIMEROTATE=10 \ + public.ecr.aws/x3s2s6k3/wickrio/bot-compliance-cloud:latest