AWS mgn documentation change
Summary
Updated storage documentation including FSx for ONTAP support, encryption references, and added security group note
Security assessment
Added explicit security documentation about configuring security groups for iSCSI access (TCP port 3260) when using FSx for ONTAP. This provides security hardening guidance but doesn't address a specific vulnerability.
Diff
diff --git a/mgn/latest/ug/detailed-considerations.md b/mgn/latest/ug/detailed-considerations.md index 368b41a35..a7b008022 100644 --- a//mgn/latest/ug/detailed-considerations.md +++ b//mgn/latest/ug/detailed-considerations.md @@ -50 +50 @@ Each disk is composed of the following fields: - * **Storage type** – Shows the default volume type (EBS). This cannot be changed. + * **Storage type** – Shows the target storage type (Amazon EBS or FSx for ONTAP) configured in the [replication settings](./replication-server-settings.html#ebs-volume). @@ -58 +58 @@ Each disk is composed of the following fields: - * **Volume type** – You can select any volume type you want to use. AWS Transform MGN automatically sets **General Purpose SSD (gp3)** as the default. You may want to change the volume type in order to reduce costs. Ensure that you read the caveats in the [EBS documentation](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSPerformance.html#initialize). + * **Volume type** – You can select any volume type you want to use. AWS Transform MGN automatically sets **General Purpose SSD (gp3)** as the default. You may want to change the volume type to reduce costs. Ensure that you read the caveats in the [EBS documentation](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSPerformance.html#initialize). @@ -86 +86 @@ The following storage parameters: **Volume initialization rate** , **EBS card in - * **Encrypted** – Set this to **Yes** if you are specifying a KMS key for the volume. If you are not using a per-volume KMS key, encryption is controlled through the [EBS Encryption](./replication-server-settings.html#ebs-encryption) section of the replication settings. + * **Encrypted** – Set this to **Yes** if you are specifying a KMS key for the volume. If you are not using a per-volume KMS key, encryption is controlled through the [EBS Encryption](./ebs-storage.html#ebs-encryption) section of the replication settings. @@ -114 +114 @@ When selecting an pre-existing ENI, you must change the **Auto-assign public IP* - * **Primary IP** – Use this field if you wish to utilize a private IP. The private IP you set in the **Copy private IP** field in the MGN launch settings is copied to this field. + * **Primary IP** – Use this field if you wish to use a private IP. The private IP you set in the **Copy private IP** field in the MGN launch settings is copied to this field. @@ -121,0 +122,4 @@ When selecting an pre-existing ENI, you must change the **Auto-assign public IP* +###### Note + +If you have selected FSx for ONTAP as the target storage in Replication settings, ensure you select a security group that allows your launched instances to connect to the FSx for ONTAP file system over iSCSI (TCP port 3260). See [Step 1: Configure security groups](./fsx-ontap.html#fsx-ontap-step1-security-groups) in the [FSx for ONTAP configuration guide](./fsx-ontap.html). + @@ -133 +137 @@ When selecting an pre-existing ENI, you must change the **Auto-assign public IP* - * **Advanced details** – In this section, we focus on the fields you should **not** change or edit in order to allow AWS Transform MGN to function properly. **Do not** change or edit any of the following fields: + * **Advanced details** – In this section, we focus on the fields you should **not** change or edit to allow AWS Transform MGN to function properly. **Do not** change or edit any of the following fields: