本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。
配置和创建集群
下面是一个示例集群配置,其中包括带加密功能的 Amazon Elastic Block Store 共享文件系统。
Region:eu-west-1Image: Os: alinux2 HeadNode: InstanceType: t2.micro Networking: SubnetId: subnet-abcdef01234567890Ssh: KeyName:my-ssh-keyIam: AdditionalIamPolicies: - Policy: arn:aws:iam::123456789012:policy/ParallelClusterKmsPolicy Scheduling: Scheduler: slurm SlurmQueues: - Name:q1ComputeResources: - Name: t2micro InstanceType: t2.micro MinCount: 0 MaxCount: 10 Networking: SubnetIds: - subnet-abcdef01234567890Iam: AdditionalIamPolicies: - Policy: arn:aws:iam::123456789012:policy/ParallelClusterKmsPolicy SharedStorage: - MountDir: /shared/ebs1Name:shared-ebs1StorageType: Ebs EbsSettings: Encrypted: True KmsKeyId:abcd1234-ef56-gh78-ij90-abcd1234efgh5678
将红色文本项目替换为您自己的值。然后,创建一个使用您的 Amazon KMS 密钥对 Amazon EBS 中的数据进行加密的集群。
Amazon EFS 和 FSx Lustre 文件系统的配置类似。
Amazon EFS SharedStorage 配置如下。
... SharedStorage: - MountDir: /shared/efs1Name:shared-efs1StorageType: Efs EfsSettings: Encrypted: True KmsKeyId:abcd1234-ef56-gh78-ij90-abcd1234efgh5678
fo FSx r Lustre 的SharedStorage配置如下所示。
... SharedStorage: - MountDir: /shared/fsx1Name:shared-fsx1StorageType: FsxLustre FsxLustreSettings: StorageCapacity:1200DeploymentType:PERSISTENT_1PerUnitStorageThroughput:200KmsKeyId:abcd1234-ef56-gh78-ij90-abcd1234efgh5678