AWS wickr medium security documentation change
Summary
Removed --network=host flag, added rotation timer environment variable, and updated Docker image.
Security assessment
Network isolation improves container security. ECR migration reduces third-party supply chain risks.
Diff
diff --git a/wickr/latest/adminguide/using-env-variables.md b/wickr/latest/adminguide/using-env-variables.md index 444dc167f..52b0f0d49 100644 --- a//wickr/latest/adminguide/using-env-variables.md +++ b//wickr/latest/adminguide/using-env-variables.md @@ -14 +14 @@ If you don't want to use Secrets Manager to host the data retention bot credenti - docker run -v /opt/compliance_1234567890_bot:/tmp/compliance_1234567890_bot --network=host \ + docker run -v /opt/compliance_1234567890_bot:/tmp/compliance_1234567890_bot \ @@ -17,0 +18 @@ If you don't want to use Secrets Manager to host the data retention bot credenti + -e WICKRIO_COMP_TIMEROTATE=10 \ @@ -21 +22 @@ If you don't want to use Secrets Manager to host the data retention bot credenti - wickr/bot-compliance-cloud:latest + public.ecr.aws/x3s2s6k3/wickrio/bot-compliance-cloud:latest