AWS efs documentation change
Summary
Minor terminology changes replacing 'Amazon EFS' with 'EFS' for consistency, no technical content changes
Security assessment
Changes are purely stylistic/terminological (using 'EFS' instead of 'Amazon EFS'). No security implications or modifications to encryption implementation details. TLS configuration guidance remains unchanged.
Diff
diff --git a/efs/latest/ug/encryption-in-transit.md b/efs/latest/ug/encryption-in-transit.md index b2e313626..b14976587 100644 --- a//efs/latest/ug/encryption-in-transit.md +++ b//efs/latest/ug/encryption-in-transit.md @@ -9 +9 @@ How encrypting in transit works -Enabling encryption of data in transit for your Amazon EFS file system is done by enabling Transport Layer Security (TLS) when you mount your file system using the Amazon EFS mount helper. For more information, see [Mounting EFS file systems using the EFS mount helper](./efs-mount-helper.html). +Enabling encryption of data in transit for your EFS file system is done by enabling Transport Layer Security (TLS) when you mount your file system using the Amazon EFS mount helper. For more information, see [Mounting EFS file systems using the EFS mount helper](./efs-mount-helper.html). @@ -21 +21 @@ To enable encryption of data in transit, you connect to Amazon EFS using TLS. We - 2. Run `stunnel` to connect to your Amazon EFS file system on port 2049 using TLS. + 2. Run `stunnel` to connect to your EFS file system on port 2049 using TLS. @@ -32 +32 @@ Because encryption of data in transit is configured on a per-connection basis, e -By default, when using the Amazon EFS mount helper with TLS, the mount helper enforces certificate hostname checking. The Amazon EFS mount helper uses the `stunnel` program for its TLS functionality. Some versions of Linux don't include a version of stunnel that supports these TLS features by default. When using one of those Linux versions, mounting an Amazon EFS file system using TLS fails. +By default, when using the Amazon EFS mount helper with TLS, the mount helper enforces certificate hostname checking. The Amazon EFS mount helper uses the `stunnel` program for its TLS functionality. Some versions of Linux don't include a version of stunnel that supports these TLS features by default. When using one of those Linux versions, mounting an EFS file system using TLS fails. @@ -46 +46 @@ When mounting with TLS and the Amazon EFS mount helper, you are reconfiguring yo -To determine which Amazon EFS file system ID corresponds to which local mount point, you can use the following command. Replace ``efs-mount-point`` with the local path where you mounted your file system. +To determine which EFS file system ID corresponds to which local mount point, you can use the following command. Replace ``efs-mount-point`` with the local path where you mounted your file system. @@ -51 +51 @@ To determine which Amazon EFS file system ID corresponds to which local mount po -When you use the mount helper for encryption of data in transit, it also creates a process called `amazon-efs-mount-watchdog`. This process ensures that each mount's stunnel process is running, and stops the stunnel when the Amazon EFS file system is unmounted. If for some reason a stunnel process is terminated unexpectedly, the watchdog process restarts it. +When you use the mount helper for encryption of data in transit, it also creates a process called `amazon-efs-mount-watchdog`. This process ensures that each mount's stunnel process is running, and stops the stunnel when the EFS file system is unmounted. If for some reason a stunnel process is terminated unexpectedly, the watchdog process restarts it.