New Features in MarkLogic 11.3.7

This section describes the new features in MarkLogic 11.3.7.

MarkLogic Converters support on AWS Graviton added

The MarkLogic Converters package is available for MarkLogic 11.3.7 on AWS Graviton. General AWS Graviton support was introduced in MarkLogic 11.3.4; this release adds the Converters package for supported Arm-based deployments.

Cloud-agnostic privilege and role added for IMDS protection

The cloud-http-protected privilege and the cloud-protected-access role add cloud-agnostic protection to instance metadata service (IMDS) endpoints when certain functions are called.

For fresh assignments, use this new cloud privilege and role instead of the ec2-http-protected privilege and the ec2-protected-access role.

Roles already assigned the ec2-http-protected privilege and users already assigned the ec2-protected-access role continue to function and now have enhanced protection.

However, from now on, only users and service accounts explicitly assigned a role containing either ec2-http-protected or cloud-http-protected can access IMDS endpoints.

EC2 privilege and role enhanced to preserve backward compatibility

Though MarkLogic 11.3.7 now includes a cloud-agnostic privilege and role to be used from now on, the ec2-http-protected privilege and the ec2-protected-access role still exist for backward compatibility. In addition, they are now enhanced to also protect AWS Docker and Kubernetes deployments and any Azure deployments.

These enhancements make updating to the new cloud-agnostic privilege or role unnecessary for entities already assigned the EC2 privilege or role. However, from now on, only users and service accounts explicitly assigned a role containing either ec2-http-protected or cloud-http-protected can access instance metadata service (IMDS) endpoints.