From a2b4fd535efef562b0e2d2a0356627d9cccf5467 Mon Sep 17 00:00:00 2001 From: Aaron Turner Date: Tue, 9 Jul 2024 21:04:52 -0700 Subject: [PATCH] remove ecs run from docs --- docs/remote-ssh.md | 2 +- docs/security.md | 10 +++++----- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/docs/remote-ssh.md b/docs/remote-ssh.md index b62c14b7..9398f2e8 100644 --- a/docs/remote-ssh.md +++ b/docs/remote-ssh.md @@ -27,7 +27,7 @@ and/or any IAM Credentials stored in the ECS Server if you have not [enabled SSL 1. In a Docker container: `aws-sso ecs docker start` 1. Or you can use a [screen](https://www.hostinger.com/tutorials/how-to-install-and-use-linux-screen) or [tmux](https://hamvocke.com/blog/a-quick-and-easy-guide-to-tmux/) session: -`aws-sso ecs run` +`aws-sso server` 1. Load your selected IAM credentials into the ECS Server:
`aws-sso ecs load --profile=` 1. SSH to the remote system using the [-R flag to forward tcp/4144](https://man.openbsd.org/ssh#R):
diff --git a/docs/security.md b/docs/security.md index f9491fe3..f1707c78 100644 --- a/docs/security.md +++ b/docs/security.md @@ -30,14 +30,14 @@ security threat model. ### ECS Server Mode Concerns -By default, running in ECS Server Mode (`aws-sso ecs run`) an HTTP API will be +By default, running in ECS Server Mode (`aws-sso ecs server`) an HTTP API will be started on a TCP port bound to localhost. By default, loading and retrieving IAM Role credentials from this server will happen in the clear without any encryption or authentication For this reason, it is not recommended to be used in this way on multi-tenant user systems or other untrusted environments. Running the [ECS Server in docker](ecs-server.md#running-the-ecs-server-in-the-background) -will briefly expose your HTTP Authentication bearer token and SSL private key -in clear text in `~/.aws-sso/mnt/`. If you are running it on a system where the -`root` user is not trusted, this may not be acceptable. In such cases, it -is recommended to run `aws-sso ecs run` in a screen or tmux session. \ No newline at end of file +(`aws-sso ecs docker start`) will briefly expose your HTTP Authentication bearer token and +SSL private key in clear text in `~/.aws-sso/mnt/`. If you are running it on a system +where the `root` user is not trusted, this may not be acceptable. In such cases, it +is recommended to run `aws-sso ecs server` in a screen or tmux session. \ No newline at end of file