AWS AmazonRDS documentation change
Summary
Added note about cross-account KMS key usage for encrypted snapshots
Security assessment
Clarifies security best practices for encryption key sharing across accounts
Diff
diff --git a/AmazonRDS/latest/UserGuide/share-encrypted-snapshot.md b/AmazonRDS/latest/UserGuide/share-encrypted-snapshot.md index 5df463d5d..a641f310a 100644 --- a/AmazonRDS/latest/UserGuide/share-encrypted-snapshot.md +++ b/AmazonRDS/latest/UserGuide/share-encrypted-snapshot.md @@ -38,0 +39,4 @@ First you create a custom KMS key in the same AWS Region as the encrypted DB sna +###### Note + +You can also use a KMS key from another AWS account when the key policy grants access to the source and target accounts. +