AWS AWSCloudFormation documentation change
Summary
Added clarification about secret ARN usage for static key encryption vs SPEKE. Shortened 'Amazon Resource Name' to 'ARN'.
Security assessment
Improves documentation accuracy for encryption settings but does not indicate a security fix. Reinforces proper security configuration practices.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flowsource-encryption.md b/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flowsource-encryption.md index 1a492c4fc..c0cbe7961 100644 --- a/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flowsource-encryption.md +++ b/AWSCloudFormation/latest/UserGuide/aws-properties-mediaconnect-flowsource-encryption.md @@ -118 +118 @@ _Required_ : No -The Amazon Resource Name (ARN) of the role that you created during setup (when you set up MediaConnect as a trusted entity). +The ARN of the role that you created during setup (when you set up MediaConnect as a trusted entity). @@ -129 +129 @@ _Required_ : Yes -The ARN of the secret that you created in AWS Secrets Manager to store the encryption key. +The ARN of the secret that you created in AWS Secrets Manager to store the encryption key. This parameter is required for static key encryption and is not valid for SPEKE encryption.