AWS AWSCloudFormation documentation change
Summary
Added documentation about Secrets Manager authentication for MSK clusters
Security assessment
The change adds documentation about using Secrets Manager for authentication, which is a security feature, but does not address any specific security issues
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-resource-msk-batchscramsecret.md index ff22b0cd4..59d0ff0c0 100644 --- a/AWSCloudFormation/latest/UserGuide/aws-resource-msk-batchscramsecret.md +++ b/AWSCloudFormation/latest/UserGuide/aws-resource-msk-batchscramsecret.md @@ -7 +7 @@ SyntaxPropertiesReturn values -The `AWS::MSK::BatchScramSecret` resource Property description not available. for MSK. +Represents a secret stored in the AWS Secrets Manager that can be used to authenticate with a cluster using a user name and a password. @@ -40 +40 @@ To declare this entity in your AWS CloudFormation template, use the following sy -Property description not available. +The Amazon Resource Name (ARN) that uniquely identifies the cluster. @@ -51 +51 @@ _Required_ : Yes -Property description not available. +List of Amazon Resource Name (ARN)s of Secrets Manager secrets. @@ -62,0 +63,2 @@ _Required_ : No +When you provide the logical ID of this resource to the `Ref` intrinsic function, `Ref` returns the secret stored in the Secrets Manager. +