AWS parallelcluster documentation change

Service: parallelcluster · 2026-07-04 · Documentation medium

File: parallelcluster/latest/ug/Scheduling-v3.md

Summary

Added notes about EFA-enabled compute nodes requiring private subnets/NAT gateways when using single-network-card instances with multiple interface support

Security assessment

Documentation change enforces private subnet placement for EFA nodes, reducing public exposure. This implements security best practices for network isolation but doesn't fix a specific vulnerability.

Diff

diff --git a/parallelcluster/latest/ug/Scheduling-v3.md b/parallelcluster/latest/ug/Scheduling-v3.md
index d9575f34f..cf9864569 100644
--- a//parallelcluster/latest/ug/Scheduling-v3.md
+++ b//parallelcluster/latest/ug/Scheduling-v3.md
@@ -895,0 +896,4 @@ If you define a p4d or hpc6id instance type, or another instance type that has m
+###### Note
+
+Starting with AWS ParallelCluster version 3.15.0, this requirement also applies when you enable Efa on a single-network-card instance type that supports more than one network interface. AWS ParallelCluster launches these compute nodes with two network interfaces (a primary interface plus a dedicated `efa-only` interface), so Amazon EC2 does not auto-assign a public IP to them. For these queues, set `AssignPublicIp` to `false` and use a [NAT gateway](https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html) (or place the compute nodes in a private subnet) to provide public access. For more information, see [Elastic Fabric Adapter](./efa-v3.html).
+
@@ -1145,0 +1150,4 @@ If you define a p4d or hpc6id instance type, or another instance type that has m
+###### Note
+
+Starting with AWS ParallelCluster version 3.15.0, this requirement also applies when you enable Efa on a single-network-card instance type that supports more than one network interface. For more information, see [Elastic Fabric Adapter](./efa-v3.html).
+
@@ -1213,0 +1222,4 @@ If you define a p4d or hpc6id instance type, or another instance type that has m
+###### Note
+
+Starting with AWS ParallelCluster version 3.15.0, this requirement also applies when you enable Efa on a single-network-card instance type that supports more than one network interface. For more information, see [Elastic Fabric Adapter](./efa-v3.html).
+