AWS datasync documentation change

Service: datasync · 2025-05-31 · Documentation low

File: datasync/latest/userguide/API_DescribeLocationObjectStorage.md

Summary

Added CmkSecretConfig, CustomSecretConfig, and ManagedSecretConfig response elements

Security assessment

The changes document new response fields describing secret management configurations with KMS keys and Secrets Manager integration. This provides additional security feature documentation but shows no evidence of addressing an active security vulnerability.

Diff

diff --git a/datasync/latest/userguide/API_DescribeLocationObjectStorage.md b/datasync/latest/userguide/API_DescribeLocationObjectStorage.md
index cbfb82d46..095c001a5 100644
--- a//datasync/latest/userguide/API_DescribeLocationObjectStorage.md
+++ b//datasync/latest/userguide/API_DescribeLocationObjectStorage.md
@@ -42,0 +43,4 @@ Required: Yes
+       "CmkSecretConfig": { 
+          "[KmsKeyArn](./API_CmkSecretConfig.html#DataSync-Type-CmkSecretConfig-KmsKeyArn)": "**_string_** ",
+          "[SecretArn](./API_CmkSecretConfig.html#DataSync-Type-CmkSecretConfig-SecretArn)": "**_string_** "
+       },
@@ -43,0 +48,4 @@ Required: Yes
+       "CustomSecretConfig": { 
+          "[SecretAccessRoleArn](./API_CustomSecretConfig.html#DataSync-Type-CustomSecretConfig-SecretAccessRoleArn)": "**_string_** ",
+          "[SecretArn](./API_CustomSecretConfig.html#DataSync-Type-CustomSecretConfig-SecretArn)": "**_string_** "
+       },
@@ -45,0 +54,3 @@ Required: Yes
+       "ManagedSecretConfig": { 
+          "[SecretArn](./API_ManagedSecretConfig.html#DataSync-Type-ManagedSecretConfig-SecretArn)": "**_string_** "
+       },
@@ -80,0 +92,7 @@ Pattern: `^arn:(aws|aws-cn|aws-us-gov|aws-iso|aws-iso-b):datasync:[a-z\-0-9]+:[0
+**CmkSecretConfig **
+    
+
+Describes configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.
+
+Type: [CmkSecretConfig](./API_CmkSecretConfig.html) object
+
@@ -87,0 +106,7 @@ Type: Timestamp
+**CustomSecretConfig **
+    
+
+Describes configuration information for a customer-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.
+
+Type: [CustomSecretConfig](./API_CustomSecretConfig.html) object
+
@@ -109,0 +135,7 @@ Pattern: `^(efs|nfs|s3|smb|hdfs|fsx[a-z0-9-]+)://[a-zA-Z0-9.:/\-]+$`
+**ManagedSecretConfig **
+    
+
+Describes configuration information for a DataSync-managed secret, such as an authentication token or set of credentials that DataSync uses to access a specific transfer location. DataSync uses the default AWS-managed KMS key to encrypt this secret in AWS Secrets Manager.
+
+Type: [ManagedSecretConfig](./API_ManagedSecretConfig.html) object
+