AWS datasync documentation change
Summary
Added CmkSecretConfig, CustomSecretConfig, and ManagedSecretConfig response elements along with authentication type expansion
Security assessment
The changes document new response fields related to secret management configurations and expand valid authentication types. This enhances documentation of security features but doesn't indicate remediation of a specific security issue.
Diff
diff --git a/datasync/latest/userguide/API_DescribeLocationAzureBlob.md b/datasync/latest/userguide/API_DescribeLocationAzureBlob.md index 922d28d42..026093a3c 100644 --- a//datasync/latest/userguide/API_DescribeLocationAzureBlob.md +++ b//datasync/latest/userguide/API_DescribeLocationAzureBlob.md @@ -44,0 +45,4 @@ Required: Yes + "CmkSecretConfig": { + "[KmsKeyArn](./API_CmkSecretConfig.html#DataSync-Type-CmkSecretConfig-KmsKeyArn)": "**_string_** ", + "[SecretArn](./API_CmkSecretConfig.html#DataSync-Type-CmkSecretConfig-SecretArn)": "**_string_** " + }, @@ -45,0 +50,4 @@ Required: Yes + "CustomSecretConfig": { + "[SecretAccessRoleArn](./API_CustomSecretConfig.html#DataSync-Type-CustomSecretConfig-SecretAccessRoleArn)": "**_string_** ", + "[SecretArn](./API_CustomSecretConfig.html#DataSync-Type-CustomSecretConfig-SecretArn)": "**_string_** " + }, @@ -47 +55,4 @@ Required: Yes - "LocationUri": "**_string_** " + "LocationUri": "**_string_** ", + "ManagedSecretConfig": { + "[SecretArn](./API_ManagedSecretConfig.html#DataSync-Type-ManagedSecretConfig-SecretArn)": "**_string_** " + } @@ -85 +96 @@ Type: String -Valid Values: `SAS` +Valid Values: `SAS | NONE` @@ -95,0 +107,7 @@ Valid Values: `BLOCK` +**CmkSecretConfig ** + + +Describes configuration information for a DataSync-managed secret, such as an authentication token that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key. + +Type: [CmkSecretConfig](./API_CmkSecretConfig.html) object + @@ -102,0 +121,7 @@ Type: Timestamp +**CustomSecretConfig ** + + +Describes configuration information for a customer-managed secret, such as an authentication token that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key. + +Type: [CustomSecretConfig](./API_CustomSecretConfig.html) object + @@ -124,0 +150,7 @@ Pattern: `^(efs|nfs|s3|smb|hdfs|fsx[a-z0-9-]+)://[a-zA-Z0-9.:/\-]+$` +**ManagedSecretConfig ** + + +Describes configuration information for a DataSync-managed secret, such as an authentication token that DataSync uses to access a specific storage location. DataSync uses the default AWS-managed KMS key to encrypt this secret in AWS Secrets Manager. + +Type: [ManagedSecretConfig](./API_ManagedSecretConfig.html) object +