AWS msk documentation change
Summary
Clarified certificate renewal behavior differences between Express and standard broker clusters.
Security assessment
Provides operational details about encryption certificate management (a security feature) but does not indicate a security vulnerability fix.
Diff
diff --git a/msk/latest/developerguide/msk-encryption.md b/msk/latest/developerguide/msk-encryption.md index 8bb245a5f..bbd9ef49f 100644 --- a//msk/latest/developerguide/msk-encryption.md +++ b//msk/latest/developerguide/msk-encryption.md @@ -9 +9 @@ Amazon MSK encryption at restAmazon MSK encryption in transit -Amazon MSK provides data encryption options that you can use to meet strict data management requirements. The certificates that Amazon MSK uses for encryption must be renewed every 13 months. Amazon MSK automatically renews these certificates for all clusters. It sets the state of the cluster to `MAINTENANCE` when it starts the certificate-update operation. It sets it back to `ACTIVE` when the update is done. While a cluster is in the `MAINTENANCE` state, you can continue to produce and consume data, but you can't perform any update operations on it. +Amazon MSK provides data encryption options that you can use to meet strict data management requirements. The certificates that Amazon MSK uses for encryption must be renewed every 13 months. Amazon MSK automatically renews these certificates for all clusters. Express broker clusters remain in `ACTIVE` state when Amazon MSK starts the certificate-update operation. For standard brokers clusters, Amazon MSK sets the state of the cluster to `MAINTENANCE` when it starts the certificate-update operation. MSK sets it back to `ACTIVE` when the update is done. While a cluster is in the certificate-update operation, you can continue to produce and consume data, but you can't perform any update operations on it.