AWS wickr medium security documentation change

Service: wickr · 2026-05-16 · Security-related medium

File: wickr/latest/adminguide/data-retention-startup-asm-s3.md

Summary

Removed --network=host flag, added rotation timer environment variable, and updated Docker image location.

Security assessment

Network isolation improves security posture. ECR migration reduces third-party dependency risks.

Diff

diff --git a/wickr/latest/adminguide/data-retention-startup-asm-s3.md b/wickr/latest/adminguide/data-retention-startup-asm-s3.md
index 0aa129ac1..c409f9039 100644
--- a//wickr/latest/adminguide/data-retention-startup-asm-s3.md
+++ b//wickr/latest/adminguide/data-retention-startup-asm-s3.md
@@ -14 +14 @@ You can use the Secrets Manager to host the credentials, and the Amazon S3 bucke
-    docker run -v /opt/compliance_1234567890_bot:/tmp/compliance_1234567890_bot --network=host \
+    docker run -v /opt/compliance_1234567890_bot:/tmp/compliance_1234567890_bot \
@@ -18 +18,2 @@ You can use the Secrets Manager to host the credentials, and the Amazon S3 bucke
-    wickr/bot-compliance-cloud:latest
+     -e WICKRIO_COMP_TIMEROTATE=10 \
+    public.ecr.aws/x3s2s6k3/wickrio/bot-compliance-cloud:latest