AWS cli documentation change
Summary
Updated documentation for EVS connector creation: Added new connector types (OPERATIONS_MANAGER, SDDC_MANAGER), clarified secret requirements per connector type, strengthened credential permission guidance to 'read-only', added status monitoring parameters, and noted automatic connector creation for VCF environments.
Security assessment
The change enhances security documentation by specifying secret field requirements (apiKey vs username/password) and strengthening the principle of least privilege recommendation from 'minimum required permissions' to explicit 'read-only permissions'. However, there's no evidence of addressing a specific vulnerability or incident.
Diff
diff --git a/cli/latest/reference/evs/create-environment-connector.md b/cli/latest/reference/evs/create-environment-connector.md index 8535df6f2..d8fb7cd39 100644 --- a//cli/latest/reference/evs/create-environment-connector.md +++ b//cli/latest/reference/evs/create-environment-connector.md @@ -15 +15 @@ - * [AWS CLI 2.35.11 Command Reference](../../index.html) » + * [AWS CLI 2.35.13 Command Reference](../../index.html) » @@ -59 +59,7 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c -Creates a connector for an Amazon EVS environment. A connector establishes a connection to a VCF appliance, such as vCenter, using a fully qualified domain name and an Amazon Web Services Secrets Manager secret that stores the appliance credentials. +Creates a connector for an Amazon EVS environment. A connector allows the Amazon EVS control plane to interface with VCF appliances using a fully qualified domain name. + +You can create only one connector of each type per environment. For environments where Amazon EVS installs VCF, the `SDDC_MANAGER` connector is created automatically. + +### Note + +Amazon EVS requires an active connector to SDDC Manager or VCF Operations Manager to monitor environment health and license compliance. @@ -125,0 +132,6 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/evs-20 +> +> * `OPERATIONS_MANAGER` : Connector to an Operations Manager appliance. Required for VCF 9x environments. +> * `SDDC_MANAGER` : Connector to an SDDC Manager appliance. Required for VCF 5.x environments. +> * `VCENTER` : Connector to a vCenter Server appliance. Required for features that depend on vCenter, such as Windows Server license-included. +> + @@ -128,0 +141,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/evs-20 +> * `OPERATIONS_MANAGER` +> * `SDDC_MANAGER` @@ -147 +161 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/evs-20 -> The ARN or name of the Amazon Web Services Secrets Manager secret that stores the credentials for the VCF appliance. +> The ARN or name of the Amazon Web Services Secrets Manager secret that stores the credentials for the VCF appliance. `SDDC_MANAGER` requires an `apiKey` field; `OPERATIONS_MANAGER` and `VCENTER` require `username` and `password` fields. @@ -151 +165 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/evs-20 -> Do not use credentials with Administrator privileges. We recommend using a service account with the minimum required permissions. +> Do not use credentials with Administrator privileges. We recommend using a service account with read-only permissions. @@ -303,0 +318,2 @@ connector -> (structure) +>> * `OPERATIONS_MANAGER` +>> * `SDDC_MANAGER` @@ -384,0 +401,6 @@ connector -> (structure) +>>>> * `OPERATIONS_MANAGER_REACHABILITY` +>>>> * `SDDC_MANAGER_REACHABILITY` +>>>> * `SDDC_MANAGER_HOST_COUNT` +>>>> * `SDDC_MANAGER_KEY_COVERAGE` +>>>> * `SDDC_MANAGER_KEY_REUSE` +>>>> * `CONNECTOR_HEALTH` @@ -426 +448 @@ connector -> (structure) - * [AWS CLI 2.35.11 Command Reference](../../index.html) » + * [AWS CLI 2.35.13 Command Reference](../../index.html) »