AWS fsx high security documentation change
Summary
Added a new prerequisite step for configuring EFA-enabled security groups and renumbered subsequent steps
Security assessment
Added explicit requirement to configure security groups for EFA traffic, which prevents network misconfigurations that could expose Lustre clients. Failure to properly configure security groups could allow unauthorized access to sensitive file systems.
Diff
diff --git a/fsx/latest/LustreGuide/configure-efa-clients.md b/fsx/latest/LustreGuide/configure-efa-clients.md index 523f0eaf1..641eec7a7 100644 --- a//fsx/latest/LustreGuide/configure-efa-clients.md +++ b//fsx/latest/LustreGuide/configure-efa-clients.md @@ -7 +7 @@ -Step 1: Install required driversStep 2: Configure EFA for the Lustre clientStep 3: EFA interfaces +Step 1: Configure an EFA-enabled security groupStep 2: Install required driversStep 3: Configure EFA for the Lustre clientStep 4: EFA interfaces @@ -30 +30 @@ EFA is supported on Nitro v4 (or higher) EC2 instances that support EFA, excludi - * Step 1: Install required drivers + * Step 1: Configure an EFA-enabled security group @@ -32 +32 @@ EFA is supported on Nitro v4 (or higher) EC2 instances that support EFA, excludi - * Step 2: Configure EFA for the Lustre client + * Step 2: Install required drivers @@ -34 +34 @@ EFA is supported on Nitro v4 (or higher) EC2 instances that support EFA, excludi - * Step 3: EFA interfaces + * Step 3: Configure EFA for the Lustre client @@ -35,0 +36 @@ EFA is supported on Nitro v4 (or higher) EC2 instances that support EFA, excludi + * Step 4: EFA interfaces @@ -39 +40,6 @@ EFA is supported on Nitro v4 (or higher) EC2 instances that support EFA, excludi -## Step 1: Install required drivers + +## Step 1: Configure an EFA-enabled security group + +Before you configure your EFA client, you must ensure that the security groups for both your file system and your Lustre clients allow EFA traffic. For instructions on configuring security groups for EFA, see [EFA-enabled security groups](./limit-access-security-groups.html#efa-security-groups). + +## Step 2: Install required drivers @@ -102 +108 @@ Requirements: -## Step 2: Configure EFA for the Lustre client +## Step 3: Configure EFA for the Lustre client @@ -159 +165 @@ For information on automatically mounting your Amazon FSx for Lustre file system -## Step 3: EFA interfaces +## Step 4: EFA interfaces