AWS mwaa medium security documentation change
Summary
Added 'Unsupported configurations' section documenting incompatible Airflow options including security-related limitations.
Security assessment
Explicitly documents that 'core.multi_team' is unsupported due to incompatibility with MWAA authentication and secrets management, preventing misconfigurations that could compromise access controls. Also notes 'triggerer.queues_enabled' causes operational failures.
Diff
diff --git a/mwaa/latest/userguide/configuring-env-variables.md b/mwaa/latest/userguide/configuring-env-variables.md index 5482d8a33..1992c2a02 100644 --- a//mwaa/latest/userguide/configuring-env-variables.md +++ b//mwaa/latest/userguide/configuring-env-variables.md @@ -7 +7 @@ -PrerequisitesHow it worksUsing configuration options to load pluginsConfiguration options overviewConfiguration referenceExamples and sample codeWhat's next? +PrerequisitesHow it worksUsing configuration options to load pluginsConfiguration options overviewConfiguration referenceUnsupported configurationsExamples and sample codeWhat's next? @@ -42,0 +43,2 @@ Apache Airflow configuration options can be attached to your Amazon Managed Work + * [Unsupported configurations](./configuring-env-variables.html#configuring-env-variables-unsupported) + @@ -194,0 +197,9 @@ triggerer.default_capacity (in v2) triggerer.capacity (in v3) | Defines the num +## Unsupported configurations + +The following Apache Airflow configuration options are not available in Amazon MWAA. You cannot set or override these options using the Amazon MWAA console or API. + +Airflow configuration option | Apache Airflow version | Default value | Reason +---|---|---|--- +core.multi_team | 3.2 | False | Amazon MWAA does not currently support [multi-team mode](https://airflow.apache.org/docs/apache-airflow/stable/configurations-ref.html#multi-team). Enabling this feature is incompatible with Amazon MWAA authentication, the CeleryExecutor, and environment-level secrets management. +triggerer.queues_enabled | 3.2 | False | Amazon MWAA does not support [triggerer queue assignment](https://airflow.apache.org/docs/apache-airflow/stable/authoring-and-scheduling/deferring.html#controlling-triggerer-host-assignment-per-trigger). Enabling this option causes deferred tasks to hang indefinitely. +