AWS fsx documentation change
Summary
Updated section headers and formatting, removed redundant CloudTrail logging note, and changed 'Data Encryption' to 'Data protection'
Security assessment
Changes are editorial improvements and formatting updates without introducing new security information or addressing vulnerabilities. The removed CloudTrail note doesn't indicate a security issue resolution.
Diff
diff --git a/fsx/latest/WindowsGuide/encryption-at-rest.md b/fsx/latest/WindowsGuide/encryption-at-rest.md index bc6f9da83..6eeb91e26 100644 --- a//fsx/latest/WindowsGuide/encryption-at-rest.md +++ b//fsx/latest/WindowsGuide/encryption-at-rest.md @@ -5 +5 @@ -How Amazon FSx uses AWS KMSAmazon FSx Key Policies for AWS KMS +How Amazon FSx uses AWS KMSAmazon FSx Key policies for AWS KMS @@ -30,3 +30 @@ If you use a customer managed key as your KMS key for file data encryption and d -File system encryption and decryption at rest are handled transparently. However, AWS account IDs specific to Amazon FSx appear in your AWS CloudTrail logs related to AWS KMS actions. - -## Amazon FSx Key Policies for AWS KMS +## Amazon FSx Key policies for AWS KMS @@ -44 +42 @@ Key policies are the primary way to control access to KMS keys. For more informa - * **kms:CreateGrant** – (Required) Adds a grant to a key to specify who can use the key and under what conditions. Grants are alternate permission mechanisms to key policies. For more information on grants, see [Using grants](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html) in the _AWS Key Management Service Developer Guide._ This permission is included in the default key policy. + * **kms:CreateGrant** – (Required) Adds a grant to a key to specify who can use the key and under what conditions. Grants are alternate permission mechanisms to key policies. For more information on grants, see [Using grants](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html) in the AWS Key Management Service Developer Guide. This permission is included in the default key policy. @@ -59 +57 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Data Encryption +Data protection @@ -61 +59 @@ Data Encryption -Encryption in Transit +Encryption in transit