AWS eventbridge documentation change
Summary
Added KMS key configuration details for archive encryption and updated unsupported features list
Security assessment
Added documentation about KMS encryption configuration for archives, which is a security feature, but no evidence of addressing a specific vulnerability.
Diff
diff --git a/eventbridge/latest/userguide/event-bus-update-archive.md b/eventbridge/latest/userguide/event-bus-update-archive.md index 640184203..cc2805767 100644 --- a//eventbridge/latest/userguide/event-bus-update-archive.md +++ b//eventbridge/latest/userguide/event-bus-update-archive.md @@ -12,0 +13,4 @@ You can update the following: + * The AWS KMS key used for event encryption. + +For more information, see [Encrypting archives](./encryption-archives.html). + @@ -20 +24 @@ You cannot change the name or source event bus for an archive once it has been c -Archives and schema discovery are not supported for event buses encrypted using a customer managed key. To enable archives or schema discovery on an event bus, choose to use an AWS owned key. For more information, see [KMS key options](./eb-encryption-at-rest-key-options.html). +Schema discovery is not supported for event buses encrypted using a customer managed key. To enable schema discovery on an event bus, choose to use an AWS owned key. For more information, see [KMS key options](./eb-encryption-at-rest-key-options.html).