AWS AWSCloudFormation medium security documentation change
Summary
Added documentation for encryption configuration including required permissions and property definitions. Updated syntax examples to include EncryptionConfiguration property.
Security assessment
The change introduces documentation about encryption configuration using KMS keys, which is a security feature. The addition of the s3tables:PutTableBucketEncryption permission requirement explicitly relates to security controls for encryption settings.
Diff
diff --git a/AWSCloudFormation/latest/UserGuide/aws-resource-s3tables-tablebucket.md b/AWSCloudFormation/latest/UserGuide/aws-resource-s3tables-tablebucket.md index be38dcc53..6d69aaa00 100644 --- a//AWSCloudFormation/latest/UserGuide/aws-resource-s3tables-tablebucket.md +++ b//AWSCloudFormation/latest/UserGuide/aws-resource-s3tables-tablebucket.md @@ -12 +12,6 @@ Permissions -You must have the `s3tables:CreateTableBucket` permission to use this operation. + * You must have the `s3tables:CreateTableBucket` permission to use this operation. + + * If you use this operation with the optional `encryptionConfiguration` parameter you must have the `s3tables:PutTableBucketEncryption` permission. + + + @@ -23,0 +29 @@ To declare this entity in your AWS CloudFormation template, use the following sy + "EncryptionConfiguration" : [EncryptionConfiguration](./aws-properties-s3tables-tablebucket-encryptionconfiguration.html), @@ -34,0 +41,2 @@ To declare this entity in your AWS CloudFormation template, use the following sy + EncryptionConfiguration: + [EncryptionConfiguration](./aws-properties-s3tables-tablebucket-encryptionconfiguration.html) @@ -41,0 +50,11 @@ To declare this entity in your AWS CloudFormation template, use the following sy +`EncryptionConfiguration` + + +Configuration specifying how data should be encrypted. This structure defines the encryption algorithm and optional KMS key to be used for server-side encryption. + +_Required_ : No + + _Type_ : [EncryptionConfiguration](./aws-properties-s3tables-tablebucket-encryptionconfiguration.html) + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) + @@ -97 +116 @@ Amazon S3 Tables -UnreferencedFileRemoval +EncryptionConfiguration