本文為英文版的機器翻譯版本,如內容有任何歧義或不一致之處,概以英文版為準。
設定和建立叢集
以下是範例叢集組態,其中包含具有加密功能的 Amazon Elastic Block Store 共用檔案系統。
Region:eu-west-1Image: Os: alinux2 HeadNode: InstanceType: t2.micro Networking: SubnetId: subnet-abcdef01234567890Ssh: KeyName:my-ssh-keyIam: AdditionalIamPolicies: - Policy: arn:aws:iam::123456789012:policy/ParallelClusterKmsPolicy Scheduling: Scheduler: slurm SlurmQueues: - Name:q1ComputeResources: - Name: t2micro InstanceType: t2.micro MinCount: 0 MaxCount: 10 Networking: SubnetIds: - subnet-abcdef01234567890Iam: AdditionalIamPolicies: - Policy: arn:aws:iam::123456789012:policy/ParallelClusterKmsPolicy SharedStorage: - MountDir: /shared/ebs1Name:shared-ebs1StorageType: Ebs EbsSettings: Encrypted: True KmsKeyId:abcd1234-ef56-gh78-ij90-abcd1234efgh5678
以您自己的值取代紅色文字的項目。然後,建立使用 AWS KMS 金鑰在 Amazon EBS 中加密資料的叢集。
Amazon EFS 和 FSx for Lustre 檔案系統的組態類似。
Amazon EFS SharedStorage組態如下所示。
... SharedStorage: - MountDir: /shared/efs1Name:shared-efs1StorageType: Efs EfsSettings: Encrypted: True KmsKeyId:abcd1234-ef56-gh78-ij90-abcd1234efgh5678
FSx for Lustre SharedStorage組態如下所示。
... SharedStorage: - MountDir: /shared/fsx1Name:shared-fsx1StorageType: FsxLustre FsxLustreSettings: StorageCapacity:1200DeploymentType:PERSISTENT_1PerUnitStorageThroughput:200KmsKeyId:abcd1234-ef56-gh78-ij90-abcd1234efgh5678