AWS wickr medium security documentation change
Summary
Removed --network=host flag, added rotation timer, updated Docker image, and changed rotation interval to 10 minutes.
Security assessment
Network isolation, reduced rotation window, and ECR migration collectively improve security posture against container escapes and data exposure.
Diff
diff --git a/wickr/latest/adminguide-classic/data-retention-startup-asm.md b/wickr/latest/adminguide-classic/data-retention-startup-asm.md index 604d616b4..d28771004 100644 --- a//wickr/latest/adminguide-classic/data-retention-startup-asm.md +++ b//wickr/latest/adminguide-classic/data-retention-startup-asm.md @@ -14 +14 @@ You can use the Secrets Manager to identify the data retention bot’s password. - docker run -v /opt/compliance_1234567890_bot:/tmp/compliance_1234567890_bot --network=host \ + docker run -v /opt/compliance_1234567890_bot:/tmp/compliance_1234567890_bot \ @@ -18 +18,2 @@ You can use the Secrets Manager to identify the data retention bot’s password. - wickr/bot-compliance-cloud:latest + -e WICKRIO_COMP_TIMEROTATE=10 \ + public.ecr.aws/x3s2s6k3/wickrio/bot-compliance-cloud:latest @@ -33 +34 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Start bot with 15 minute message file rotation +Start bot with 10 minute message file rotation