-
Notifications
You must be signed in to change notification settings - Fork 46
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Co-authored-by: Dimple Kuriakose <[email protected]>
- Loading branch information
Showing
2 changed files
with
18 additions
and
12 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,39 +1,45 @@ | ||
Ubuntu Pro on AWS | ||
----------------- | ||
`Ubuntu Pro <https://ubuntu.com/aws/pro>`_ is a paid offering that | ||
`Ubuntu Pro`_ is a paid offering that | ||
provides expanded security coverage, enhanced kernel patching, and | ||
hardening options for compliance frameworks. All Ubuntu Pro images on | ||
Amazon receive the following features through Pro. | ||
|
||
Expanded Security Maintenance (ESM) | ||
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ | ||
`ESM archives <https://ubuntu.com/security/esm>`_ extends the security patching of | ||
`ESM`_ extends the security patching of | ||
the main archive to 10 years through the `esm-infra` entitlement. In addition | ||
to patching the core of Ubuntu, Pro offers security maintenance of the | ||
`universe` pocket. This security coverage is considered best effort | ||
to patching the core of Ubuntu (i.e. the `Ubuntu main` repository), Pro also offers security maintenance of the | ||
`Ubuntu universe` repository. This security coverage is considered best effort | ||
without Ubuntu Pro. | ||
|
||
Livepatch | ||
~~~~~~~~~ | ||
`Livepatch <https://ubuntu.com/security/livepatch>`_ applies security updates | ||
to the kernel for critical and high security vulnerabilities to a live system. | ||
This provides a buffer for system administrators to minimise downtime between | ||
`Livepatch`_ applies security updates | ||
to the kernel for critical and high security vulnerabilities in a live system. | ||
This allows system administrators to minimise downtime between | ||
scheduled maintenance windows. This is particularly helpful for workloads | ||
that are expensive to migrate, such as kubernetes workers for EKS. | ||
|
||
Compliance | ||
~~~~~~~~~~ | ||
Ubuntu Pro offers compliance options for users that need to apply | ||
CIS (level 1 and 2) or FIPS hardening. FIPS is currently supported | ||
on Ubuntu 18.04 and 20.04. 22.04 is currently available through the | ||
on Ubuntu 18.04 and 20.04. For 22.04, it is currently available through the | ||
`fips-preview` and `fips-updates` repositories provided through the | ||
FIPS pro entitlement, but these modules are not yet certified. | ||
|
||
Ubuntu Landscape | ||
~~~~~~~~~~~~~~~~ | ||
All Ubuntu Pro customers are entitled to usage of | ||
All Ubuntu Pro customers are entitled to the usage of | ||
`Landscape <https://ubuntu.com/landscape>_` self-hosted and SaaS solutions. | ||
Landscape is an endpoint management solution for monitoring your Ubuntu | ||
estate. This includes alerting for security vulnerabilities, patching status, | ||
managing repository mirrors, and more. To sign up for Landscape SaaS see | ||
the `sign up page <https://landscape.canonical.com/signup>_`. | ||
the `sign up page`_. | ||
|
||
.. _`Ubuntu Pro`: https://ubuntu.com/aws/pro | ||
.. _`ESM`: https://ubuntu.com/security/esm | ||
.. _`Livepatch`: https://ubuntu.com/security/livepatch | ||
.. _`Landscape`: https://ubuntu.com/landscape | ||
.. _`sign up page`: https://landscape.canonical.com/signup |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters