Vulnerability analysis and management in AWS Parallel Computing Service - AWS PCS

Vulnerability analysis and management in AWS Parallel Computing Service

Configuration and IT controls are a shared responsibility between AWS and you. For more information, see the AWS shared responsibility model. AWS handles basic security tasks for the underlying infrastructure in the service account, such as patching the operating system on controller instances, firewall configuration, and AWS infrastructure disaster recovery. These procedures have been reviewed and certified by the appropriate third parties. For more details, see Best Practices for Security, Identity, and Compliance.

Note

Slurm controllers are unavailable while we update them. Running jobs aren't affected. Jobs submitted when the cluster's controller is unavailable are held until the controller is available.

You are responsible for the security of the underlying infrastructure in your AWS account:

  • Maintain your code, including updates and security patches.

  • Patch and update the operating system in the Amazon Machine Image (AMI) for your compute node groups and update your compute node groups to use the updated AMI.

  • Update the scheduler to keep it within supported versions. Update the AMI for your compute node groups and update your compute node group to use the updated AMI.

  • Authenticate and encrypt communication between user clients and the nodes they connect to.

For more information about updating the AMI for your compute node groups, see Amazon Machine Images (AMIs) for AWS PCS.