AWS AWSCloudFormation documentation change
Summary
Added details about KMS key usage for encryption at rest and update restrictions
Security assessment
Documents encryption-at-rest implementation details without referencing a security incident
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-properties-msk-cluster-encryptionatrest.md b/AWSCloudFormation/latest/UserGuide/aws-properties-msk-cluster-encryptionatrest.md index d82107ce6..10ba35a21 100644 --- a//AWSCloudFormation/latest/UserGuide/aws-properties-msk-cluster-encryptionatrest.md +++ b//AWSCloudFormation/latest/UserGuide/aws-properties-msk-cluster-encryptionatrest.md @@ -7 +7 @@ SyntaxProperties -The `EncryptionAtRest` property type specifies Property description not available. for an [AWS::MSK::Cluster](./aws-resource-msk-cluster.html). +The data-volume encryption details. You can't update encryption at rest settings for existing clusters. @@ -32 +32 @@ To declare this entity in your AWS CloudFormation template, use the following sy -Property description not available. +The ARN of the Amazon KMS key for encrypting data at rest. If you don't specify a KMS key, MSK creates one for you and uses it.