AWS res medium security documentation change
Summary
Updated CloudFormation URL, clarified TLS certificate requirements for LDAPS, and added tag restrictions
Security assessment
Making TLS certificates required for LDAPS enforces encrypted AD communications, preventing credential interception. Tag restrictions prevent reserved tag conflicts.
Diff
diff --git a/res/archive/release-minus-2/ug/launch-the-product.md b/res/archive/release-minus-2/ug/launch-the-product.md index 4f4436b86..726d64574 100644 --- a//res/archive/release-minus-2/ug/launch-the-product.md +++ b//res/archive/release-minus-2/ug/launch-the-product.md @@ -27 +27 @@ The AWS CloudFormation template deploys Research and Engineering Studio on AWS i - 2. Launch the [ template ](https://console.aws.amazon.com/cloudformation/home?region=us-east-1#/stacks/quickcreate?templateURL=https://research-engineering-studio-us-east-1.s3.amazonaws.com/releases/latest/ResearchAndEngineeringStudio.template.json). + 2. Launch the [ template ](https://console.aws.amazon.com/cloudformation/home#/stacks/quickcreate?templateURL=https%3A%2F%2Fresearch-engineering-studio-us-east-1.s3.amazonaws.com%2Freleases%2Flatest%2FResearchAndEngineeringStudio.template.json). @@ -64 +64 @@ ComputersOU | | Organizational unit within AD that instances will join. -DomainTLSCertificateSecretARN | | _(Optional)_ Provide a domain TLS certificate secret ARN to enable TLS communication to AD. +DomainTLSCertificateSecretARN | | _(Required for LDAPS)_ Provide a domain TLS certificate secret ARN to enable TLS communication to AD. Leave empty if not using LDAPS. @@ -77 +77,3 @@ CognitoUserPoolDomainUrl | | Cognito user pool domain for managed login. This - 5. Choose **Create stack** to deploy the stack. + 5. Under **Configure stack options → Tags -_optional_** , add the tags (key-value pairs) you want to apply to RES deployed resources. Tag key `Name` and `res:*` are preserved by RES and could not be used as tag key. + + 6. Choose **Create stack** to deploy the stack.