AWS cloudshell medium security documentation change
Summary
Added documentation for installing/managing AWS Tools for PowerShell in CloudShell home directory
Security assessment
Explicitly mentions user responsibility for security patches when manually installing software ('it's your responsibility to manage updates and security patches'). Adds security documentation by linking to Data Protection page and emphasizing security implications of custom installations.
Diff
diff --git a/cloudshell/latest/userguide/vm-specs.md b/cloudshell/latest/userguide/vm-specs.md index a0b1953f5..cbe65a552 100644 --- a//cloudshell/latest/userguide/vm-specs.md +++ b//cloudshell/latest/userguide/vm-specs.md @@ -7 +7 @@ -Compute environment resourcesCloudShell network requirementsPre-installed softwareInstalling AWS CLI to your home directoryInstalling third-party software on your shell environmentModifying your shell with scripts +Compute environment resourcesCloudShell network requirementsPre-installed softwareInstalling AWS CLI to your home directoryInstalling AWS Tools for PowerShell to your home directoryInstalling third-party software on your shell environmentModifying your shell with scripts @@ -122 +122 @@ zip/unzip | The zip/unzip utilities use an archive file format that delivers lo -Like the rest of the software that's pre-installed in your CloudShell environment, the AWS CLI tool is updated automatically with scheduled upgrades and security patches. If you want to ensure that you have the most up-to-date version of AWS CLI, you can choose to manually install the tool in the shell's home directory. +Like the rest of the software that's pre-installed in your CloudShell environment, the [AWS CLI](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-welcome.html) tool is updated automatically with scheduled upgrades and security patches. If you want to ensure that you have the most up-to-date version of AWS CLI, you can choose to manually install the tool in the shell's home directory. @@ -127,0 +128,2 @@ You need to manually install your copy of AWS CLI in the home directory so that +To review changes between versions, see the [AWS CLI Change Log](https://github.com/aws/aws-cli/blob/v2/CHANGELOG.rst). + @@ -158,0 +161,48 @@ If you undo this change to `PATH`, `aws` commands that don't feature a specified +## Installing AWS Tools for PowerShell to your home directory + +Like the rest of the software that's pre-installed in your CloudShell environment, the [AWS Tools for PowerShell](https://docs.aws.amazon.com/powershell/latest/userguide/pstools-welcome.html) modules are updated automatically with scheduled upgrades and security patches. If you want to ensure that you have the most up-to-date version of AWS Tools for PowerShell, you can choose to manually install the modules in the shell's home directory. + +###### Important + +You need to manually install your copy of AWS Tools for PowerShell in the home directory so that it's available the next time you start a CloudShell session. This installation is needed because files that are added to directories outside of `$HOME` are deleted after you finish a shell session. Also, after you install this copy of AWS Tools for PowerShell, it isn't automatically updated. In other words, it's your responsibility to manage updates and security patches. + +To review changes between versions, see the [AWS Tools for PowerShell Change Log](https://github.com/aws/aws-tools-for-powershell/tree/main/changelogs). + +For more information about the AWS Shared Responsibility Model, see [Data protection in AWS CloudShell](./data-protection.html). + +###### To install AWS Tools for PowerShell + + 1. Before you begin, exit any active PowerShell sessions by running `exit`. These commands must be run from the default Bash shell. Running them from a PowerShell session can cause syntax errors or prevent modules from being updated if they are locked by an active session. + + 2. Use the `curl` command to download a zipped copy of the AWS Tools for PowerShell modules: + + curl -sf -o AWS.Tools.zip "https://sdk-for-net.amazonwebservices.com/ps/v5/latest/AWS.Tools.zip" || echo "Download failed" + + 3. Remove any existing AWS.Tools modules from the PowerShell modules directory: + + find "/home/cloudshell-user/.local/share/powershell/Modules" -maxdepth 1 -type d -name "AWS.Tools.*" -exec rm -rf {} + + + 4. Unzip the modules to the PowerShell modules directory: + + unzip -q -o AWS.Tools.zip -d "/home/cloudshell-user/.local/share/powershell/Modules" + + 5. Delete the downloaded zip file: + + rm -f AWS.Tools.zip + + 6. Start PowerShell and verify the installation: + + pwsh + +Then check the installed version: + + Get-AWSPowerShellVersion + + + + +To remove the AWS Tools for PowerShell from your home directory, exit PowerShell and run the following command: + + + find "/home/cloudshell-user/.local/share/powershell/Modules" -maxdepth 1 -type d -name "AWS.Tools.*" -exec rm -rf {} + +