AWS res documentation change
Summary
Added Cognito user pool requirements and modified proxy configuration command
Security assessment
Documents security-sensitive authentication requirements (Cognito custom attributes) but no vulnerability fixes. Proxy change appears operational.
Diff
diff --git a/res/archive/release-minus-3/ug/prerequisites.md b/res/archive/release-minus-3/ug/prerequisites.md index 06b1eb2f8..5070f8bb7 100644 --- a//res/archive/release-minus-3/ug/prerequisites.md +++ b//res/archive/release-minus-3/ug/prerequisites.md @@ -7 +7 @@ -Create an AWS account with an administrative userCreate an Amazon EC2 SSH key pairIncrease service quotasCreate a custom domain (optional)Create domain (GovCloud only)Provide external resourcesConfigure LDAPS in your environment (optional)Service Account for Microsoft Active DirectoryConfigure a private VPC (optional) +Create an AWS account with an administrative userCreate an Amazon EC2 SSH key pairIncrease service quotasCreate a Cognito user pool (Optional)Create a custom domain (optional)Create domain (GovCloud only)Provide external resourcesConfigure LDAPS in your environment (optional)Service Account for Microsoft Active DirectoryConfigure a private VPC (optional) @@ -18,0 +19,2 @@ Create an AWS account with an administrative userCreate an Amazon EC2 SSH key pa + * Create a Cognito user pool (Optional) + @@ -71,0 +74,12 @@ Your AWS account has default quotas, formerly referred to as limits, for each AW +## Create a Cognito user pool (Optional) + +You have the option to import an existing Cognito User Pool for user and client authentication when you install RES. Otherwise, RES will create a new Cognito User Pool automatically. The pre-existing User Pool needs to have the following sign-up custom attributes: + +Name | Type | Min value/length | Max value/length | Mutable +---|---|---|---|--- +custom:aws_region | String | | | TRUE +custom:cluster_name | String | | | TRUE +custom:password_last_set | Number | | | TRUE +custom:password_max_age | Number | | | TRUE +custom:uid | Number | 2000200001 | 4294967294 | TRUE + @@ -348 +362 @@ If you are setting up `http_proxy` and `https_proxy` environment variables, the - " > /etc/environment + " >> /etc/environment launch template