AWS AWSCloudFormation documentation change
Summary
Clarified SecretArn usage requirements for static key encryption and simplified role ARN description
Security assessment
Added clarification about encryption parameter requirements helps prevent misconfiguration of security-related settings
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-encryption.md b/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-encryption.md index 5c8fcf082..7e39f8a62 100644 --- a/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-encryption.md +++ b/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flow-encryption.md @@ -118 +118 @@ _Required_ : No -The Amazon Resource Name (ARN) of the role that you created during setup (when you set up MediaConnect as a trusted entity). +The ARN of the role that you created during setup (when you set up MediaConnect as a trusted entity). @@ -129 +129 @@ _Required_ : Yes -The ARN of the secret that you created in AWS Secrets Manager to store the encryption key. +The ARN of the secret that you created in AWS Secrets Manager to store the encryption key. This parameter is required for static key encryption and is not valid for SPEKE encryption.