AWS Security ChangesHomeSearch

AWS datasync documentation change

Service: datasync · 2025-05-31 · Documentation low

File: datasync/latest/userguide/API_DescribeLocationAzureBlob.md

Summary

Added CmkSecretConfig, CustomSecretConfig, and ManagedSecretConfig response elements along with authentication type expansion

Security assessment

The changes document new response fields related to secret management configurations and expand valid authentication types. This enhances documentation of security features but doesn't indicate remediation of a specific security issue.

Diff

diff --git a/datasync/latest/userguide/API_DescribeLocationAzureBlob.md b/datasync/latest/userguide/API_DescribeLocationAzureBlob.md
index 922d28d42..026093a3c 100644
--- a//datasync/latest/userguide/API_DescribeLocationAzureBlob.md
+++ b//datasync/latest/userguide/API_DescribeLocationAzureBlob.md
@@ -44,0 +45,4 @@ Required: Yes
+       "CmkSecretConfig": { 
+          "[KmsKeyArn](./API_CmkSecretConfig.html#DataSync-Type-CmkSecretConfig-KmsKeyArn)": "**_string_** ",
+          "[SecretArn](./API_CmkSecretConfig.html#DataSync-Type-CmkSecretConfig-SecretArn)": "**_string_** "
+       },
@@ -45,0 +50,4 @@ Required: Yes
+       "CustomSecretConfig": { 
+          "[SecretAccessRoleArn](./API_CustomSecretConfig.html#DataSync-Type-CustomSecretConfig-SecretAccessRoleArn)": "**_string_** ",
+          "[SecretArn](./API_CustomSecretConfig.html#DataSync-Type-CustomSecretConfig-SecretArn)": "**_string_** "
+       },
@@ -47 +55,4 @@ Required: Yes
-       "LocationUri": "**_string_** "
+       "LocationUri": "**_string_** ",
+       "ManagedSecretConfig": { 
+          "[SecretArn](./API_ManagedSecretConfig.html#DataSync-Type-ManagedSecretConfig-SecretArn)": "**_string_** "
+       }
@@ -85 +96 @@ Type: String
-Valid Values: `SAS`
+Valid Values: `SAS | NONE`
@@ -95,0 +107,7 @@ Valid Values: `BLOCK`
+**CmkSecretConfig **
+    
+
+Describes configuration information for a DataSync-managed secret, such as an authentication token that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key.
+
+Type: [CmkSecretConfig](./API_CmkSecretConfig.html) object
+
@@ -102,0 +121,7 @@ Type: Timestamp
+**CustomSecretConfig **
+    
+
+Describes configuration information for a customer-managed secret, such as an authentication token that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key.
+
+Type: [CustomSecretConfig](./API_CustomSecretConfig.html) object
+
@@ -124,0 +150,7 @@ Pattern: `^(efs|nfs|s3|smb|hdfs|fsx[a-z0-9-]+)://[a-zA-Z0-9.:/\-]+$`
+**ManagedSecretConfig **
+    
+
+Describes configuration information for a DataSync-managed secret, such as an authentication token that DataSync uses to access a specific storage location. DataSync uses the default AWS-managed KMS key to encrypt this secret in AWS Secrets Manager.
+
+Type: [ManagedSecretConfig](./API_ManagedSecretConfig.html) object
+