AWS wickr medium security documentation change

Service: wickr · 2026-05-16 · Security-related medium

File: wickr/latest/adminguide-classic/data-retention-startup-asm-s3-KMS.md

Summary

Removed --network=host flag, added rotation timer, and updated Docker image location.

Security assessment

Network isolation reduces attack surface. ECR migration enhances supply chain integrity.

Diff

diff --git a/wickr/latest/adminguide-classic/data-retention-startup-asm-s3-KMS.md b/wickr/latest/adminguide-classic/data-retention-startup-asm-s3-KMS.md
index bf37d443f..a43155eb5 100644
--- a//wickr/latest/adminguide-classic/data-retention-startup-asm-s3-KMS.md
+++ b//wickr/latest/adminguide-classic/data-retention-startup-asm-s3-KMS.md
@@ -14 +14 @@ You can use the Secrets Manager to host the credentials, the Amazon S3 bucket, a
-    docker run -v /opt/compliance_1234567890_bot:/tmp/compliance_1234567890_bot --network=host \
+    docker run -v /opt/compliance_1234567890_bot:/tmp/compliance_1234567890_bot \
@@ -18 +18,2 @@ You can use the Secrets Manager to host the credentials, the Amazon S3 bucket, a
-    wickr/bot-compliance-cloud:latest
+     -e WICKRIO_COMP_TIMEROTATE=10 \
+    public.ecr.aws/x3s2s6k3/wickrio/bot-compliance-cloud:latest