AWS AWSCloudFormation documentation change
Summary
Added detailed documentation about encryption settings for data in transit between clients and brokers
Security assessment
The change provides detailed information about encryption settings, which is security-related documentation, but does not address any specific security issues
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-properties-msk-cluster-encryptionintransit.md index e4fada9a0..236fd9a45 100644 --- a/AWSCloudFormation/latest/UserGuide/aws-properties-msk-cluster-encryptionintransit.md +++ b/AWSCloudFormation/latest/UserGuide/aws-properties-msk-cluster-encryptionintransit.md @@ -7 +7 @@ SyntaxProperties -The `EncryptionInTransit` property type specifies Property description not available. for an [AWS::MSK::Cluster](./aws-resource-msk-cluster.html). +The settings for encrypting data in transit. @@ -34 +34,12 @@ To declare this entity in your AWS CloudFormation template, use the following sy -Property description not available. +Indicates the encryption setting for data in transit between clients and brokers. You must set it to one of the following values. + + * `TLS`: Indicates that client-broker communication is enabled with TLS only. + + * `TLS_PLAINTEXT`: Indicates that client-broker communication is enabled for both TLS-encrypted, as well as plaintext data. + + * `PLAINTEXT`: Indicates that client-broker communication is enabled in plaintext only. + + + + +The default value is `TLS`. @@ -47 +58,3 @@ _Required_ : No -Property description not available. +When set to true, it indicates that data communication among the broker nodes of the cluster is encrypted. When set to false, the communication happens in plaintext. + +The default value is true.