AWS solutions documentation change
Summary
Updated terminology from 'solution' to 'Guidance' throughout document, adjusted service descriptions for clarity, and updated image references
Security assessment
Changes are primarily terminology updates (solution → Guidance) and service description improvements. No security vulnerabilities or new security features were introduced. Minor authentication phrasing changes (e.g., 'user pool' → 'user pools') don't impact security posture. AWS WAF recommendation remains unchanged.
Diff
diff --git a/solutions/latest/data-transfer-hub/architecture-overview.md b/solutions/latest/data-transfer-hub/architecture-overview.md index a667dca45..fc9d8fd24 100644 --- a//solutions/latest/data-transfer-hub/architecture-overview.md +++ b//solutions/latest/data-transfer-hub/architecture-overview.md @@ -9 +9 @@ Architecture diagram -This section provides reference implementation architecture diagrams for the components deployed with this solution. +This section provides reference implementation architecture diagrams for the components deployed with this Guidance. @@ -13 +13 @@ This section provides reference implementation architecture diagrams for the com -Deploying the Data Transfer Hub solution with the default parameters builds the following environment in the AWS Cloud. +Deploying the Data Transfer Hub Guidance with the default parameters builds the following environment in the AWS Cloud. @@ -15 +15 @@ Deploying the Data Transfer Hub solution with the default parameters builds the - + @@ -19 +19 @@ Deploying the Data Transfer Hub solution with the default parameters builds the -The solution automatically deploys and configures a serverless architecture with the following services: +The Guidance automatically deploys and configures a serverless architecture with the following services: @@ -21 +21 @@ The solution automatically deploys and configures a serverless architecture with - 1. The solution’s static web assets (frontend user interface) are stored in [Amazon S3](https://aws.amazon.com/s3/) and made available through [Amazon CloudFront](https://aws.amazon.com/cloudfront/). + 1. [Amazon Simple Storage Service](https://aws.amazon.com/s3/) stores static web assets (such as the frontend UI), which are made available through [Amazon CloudFront](https://aws.amazon.com/cloudfront/). @@ -23 +23 @@ The solution automatically deploys and configures a serverless architecture with - 2. The backend APIs are provided via [AWS AppSync](https://aws.amazon.com/appsync/) GraphQL. + 2. [AWS AppSync](https://aws.amazon.com/appsync/) GraphQL provides backend APIs. @@ -25 +25 @@ The solution automatically deploys and configures a serverless architecture with - 3. Users are authenticated by either [Amazon Cognito](https://aws.amazon.com/cognito/) user pool (in AWS Regions) or by an OpenID connect provider (in AWS China Regions) such as [Authing](https://www.authing.cn/), [Auth0](https://auth0.com/), etc. + 3. Users are authenticated by either [Amazon Cognito](https://aws.amazon.com/cognito/) user pools (in AWS Standard Regions) or by an OpenID connect provider (in AWS China Regions) such as [Authing](https://www.authing.cn/), [Auth0](https://auth0.com/). @@ -31 +31 @@ The solution automatically deploys and configures a serverless architecture with - 6. The plugin templates are hosted in a centralized Amazon S3 bucket managed by AWS. + 6. A centralized S3 bucket hosts plugin templates. @@ -33 +33 @@ The solution automatically deploys and configures a serverless architecture with - 7. The solution also provisions an [Amazon ECS](https://docs.aws.amazon.com/ecs/) cluster that runs the container images used by the plugin template, and the container images are hosted in [Amazon ECR](https://aws.amazon.com/ecr/). + 7. The Guidance also provisions an [Amazon ECS](https://docs.aws.amazon.com/ecs/) cluster that runs the container images used by the plugin template, and the container images are hosted in [Amazon ECR](https://aws.amazon.com/ecr/). @@ -35 +35 @@ The solution automatically deploys and configures a serverless architecture with - 8. The data transfer task information is stored in [Amazon DynamoDB](https://aws.amazon.com/dynamodb/). + 8. [Amazon DynamoDB](https://aws.amazon.com/dynamodb/) stores data transfer task information. @@ -40 +40 @@ The solution automatically deploys and configures a serverless architecture with -After deploying the solution, you can use [AWS WAF](https://aws.amazon.com/waf/) to protect CloudFront or AppSync. +After deploying the Guidance, you can use [AWS WAF](https://aws.amazon.com/waf/) to protect CloudFront or AppSync. @@ -44 +44 @@ After deploying the solution, you can use [AWS WAF](https://aws.amazon.com/waf/) -If you deploy this solution in AWS (Beijing) Region operated by Beijing Sinnet Technology Co., Ltd. (Sinnet), or the AWS (Ningxia) Region operated by Ningxia Western Cloud Data Technology Co., Ltd., you are required to provide a domain with [ICP Recordal](https://www.amazonaws.cn/en/support/icp/) before you can access the web console. +If you deploy this Guidance in AWS (Beijing) Region operated by Beijing Sinnet Technology Co., Ltd. (Sinnet), or the AWS (Ningxia) Region operated by Ningxia Western Cloud Data Technology Co., Ltd., you are required to provide a domain with [ICP Recordal](https://www.amazonaws.cn/en/support/icp/) before you can access the web console. @@ -48 +48 @@ The web console is a centralized place to create and manage all data transfer jo -As of this revision, the solution supports two data transfer plugins: an Amazon S3 plugin and an Amazon ECR plugin. +As of this revision, the Guidance supports two data transfer plugins: an Amazon S3 plugin and an Amazon ECR plugin. @@ -52 +52 @@ As of this revision, the solution supports two data transfer plugins: an Amazon - + @@ -64 +64 @@ The Amazon S3 plugin runs the following workflows: - 4. Amazon EC2 sends a message for each object that will be transferred to [Amazon Simple Queue Service (Amazon SQS)](https://aws.amazon.com/sqs/). Amazon S3 event messages can also be supported for more real-time data transfer; whenever there is object uploaded to source bucket, the event message is sent to the same Amazon SQS queue. + 4. Amazon EC2 sends a message for each object that will be transferred to [Amazon Simple Queue Service (Amazon SQS)](https://aws.amazon.com/sqs/). Amazon S3 event messages can also be supported for more real-time data transfer. Whenever there is object uploaded to source bucket, the event message is sent to the same Amazon SQS queue. @@ -68 +68 @@ The Amazon S3 plugin runs the following workflows: - 6. A record with transfer status for each object is stored in Amazon DynamoDB. + 6. DynamoDB stores a record with transfer status for each object. @@ -87 +87 @@ If an object (or part of an object) transfer failed, the JobWorker releases the - + @@ -93 +93 @@ The Amazon ECR plugin runs the following workflows: - 1. An EventBridge rule runs an AWS Step Functions workflow on a regular basis (by default, it runs daily). + 1. An Amazon EventBridge rule runs an AWS Step Functions workflow on a regular basis (by default, it runs daily). @@ -97 +97 @@ The Amazon ECR plugin runs the following workflows: - 3. Lambda will either list all the repository content in the source Amazon ECR, or get the stored image list from System Manager Parameter Store. + 3. Lambda will either list all the repository content in the source Amazon ECR, or get the stored image list from Parameter Store, a capability of AWS System Manager. @@ -99 +99 @@ The Amazon ECR plugin runs the following workflows: - 4. The transfer task will run within Fargate in a maximum concurrency of 10. If a transfer task failed for some reason, it will automatically retry three times. + 4. The transfer task will run within AWS FARGATE; in a maximum concurrency of 10. If a transfer task failed for some reason, it will automatically retry three times. @@ -101 +101 @@ The Amazon ECR plugin runs the following workflows: - 5. Each task uses [skopeo](https://github.com/containers/skopeo) to copy the images into the target ECR. + 5. Each task uses [skopeo](https://github.com/containers/skopeo) to copy the images into the target Amazon ECR registry. @@ -103 +103 @@ The Amazon ECR plugin runs the following workflows: - 6. After the copy completes, the status (either success or fail) is logged into DynamoDB for tracking purpose. + 6. After the copy completes, the status (either success or fail) is logged into DynamoDB for tracking purposes.