AWS cloudhsm medium security documentation change
Summary
Added deprecation notice for hsm1.medium HSM type and reference to compliance documentation
Security assessment
Deprecation of HSM hardware type could indicate security concerns with older models. Encouraging migration to newer HSMs helps maintain security posture, though no explicit vulnerability is mentioned.
Diff
diff --git a/cloudhsm/latest/userguide/clusters.md b/cloudhsm/latest/userguide/clusters.md index fba6ee77b..92e58af73 100644 --- a//cloudhsm/latest/userguide/clusters.md +++ b//cloudhsm/latest/userguide/clusters.md @@ -9 +9 @@ Making individual HSMs work together in a synchronized, redundant, and highly-av -AWS CloudHSM offers clusters in two modes: _FIPS_ and _non-FIPS_. In FIPS mode, only Federal Information Processing Standard (FIPS) validated keys and algorithms can be used. Non-FIPS mode offers all the keys and algorithms that are supported by AWS CloudHSM, regardless of FIPS approval. AWS CloudHSM also offers two types of HSMs: _hsm1.medium_ and _hsm2m.medium_. For details on the differences between each HSM type and cluster mode, see [AWS CloudHSM cluster modes](./cluster-hsm-types.html). +AWS CloudHSM offers clusters in two modes: _FIPS_ and _non-FIPS_. In FIPS mode, only Federal Information Processing Standard (FIPS) validated keys and algorithms can be used. Non-FIPS mode offers all the keys and algorithms that are supported by AWS CloudHSM, regardless of FIPS approval. AWS CloudHSM also offers two types of HSMs: _hsm1.medium_ and _hsm2m.medium_. For details on the differences between each HSM type and cluster mode, see [AWS CloudHSM cluster modes](./cluster-hsm-types.html). The _hsm1.medium_ HSM type is reaching end of support so new clusters cannot be created with this type. For more information, see [Deprecation notifications](./compliance-dep-notif.html#hsm-dep-1) for details.