AWS datasync documentation change
Summary
Updated agent requirements and credential handling steps. Added Secrets Manager integration for secret keys, reordered configuration steps, and clarified agent usage scenarios.
Security assessment
The change introduces integration with AWS Secrets Manager for storing secret keys instead of direct input, which improves credential security practices. However, there is no evidence of addressing a specific existing vulnerability.
Diff
diff --git a/datasync/latest/userguide/create-object-location.md b/datasync/latest/userguide/create-object-location.md index e07b10640..d3f4a2bf6 100644 --- a//datasync/latest/userguide/create-object-location.md +++ b//datasync/latest/userguide/create-object-location.md @@ -26 +26 @@ With AWS DataSync, you can transfer data between your object storage system and -To set up this kind of transfer, you create a [location](./how-datasync-transfer-works.html#sync-locations) for your object storage system. You can use this location as a transfer source or destination. +To set up this kind of transfer, you create a [location](./how-datasync-transfer-works.html#sync-locations) for your object storage system. You can use this location as a transfer source or destination. Transferring data to or from your on-premises object storage requires a DataSync agent. @@ -79 +79 @@ You configure this location as a source or destination later. - 4. For **Agents** , choose the DataSync agent that can connect to your object storage system. + 4. For **Server** , provide the domain name or IP address of the object storage server. @@ -81 +81 @@ You configure this location as a source or destination later. -You can choose more than one agent. For more information, see [Using multiple DataSync agents](./do-i-need-datasync-agent.html#multiple-agents). + 5. For **Bucket name** , enter the name of the object storage bucket involved in the transfer. @@ -83 +83 @@ You can choose more than one agent. For more information, see [Using multiple Da - 5. For **Server** , provide the domain name or IP address of the object storage server. + 6. For **Folder** , enter an object prefix. @@ -85 +85 @@ You can choose more than one agent. For more information, see [Using multiple Da - 6. For **Bucket name** , enter the name of the object storage bucket involved in the transfer. +DataSync only copies objects with this prefix. @@ -87 +87 @@ You can choose more than one agent. For more information, see [Using multiple Da - 7. For **Folder** , enter an object prefix. + 7. If your transfer requires an agent, choose **Use agents** , then choose the DataSync agent that connects to your object storage system. @@ -89 +89 @@ You can choose more than one agent. For more information, see [Using multiple Da -DataSync only copies objects with this prefix. +Some transfers don't require agents. In other scenarios, you might want to use more than one agent. For more information, see [Situations when you don't need a DataSync agent](./do-i-need-datasync-agent.html#when-agent-not-required) and [Using multiple DataSync agents](./do-i-need-datasync-agent.html#multiple-agents). @@ -111 +111 @@ You can concatenate your certificates into a `.pem` file (which can be up to 327 - 9. If credentials are required to access the object storage server, select **Requires credentials** and enter the **Access key** and **Secret key** for accessing the bucket. + 9. If the object storage server requires credentials for access, select **Requires credentials** and enter the **Access key** you use to access the bucket. Then either enter the **Secret key** directly, or specify an AWS Secrets Manager secret that contains the key. For more information, see [Providing credentials for storage locations](https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html). @@ -137,2 +136,0 @@ _Tags_ are key-value pairs that help you manage, filter, and search for your loc - * `--agent-arns` – Specify the DataSync agents that you want to connect to your object storage server. - @@ -140,0 +139,2 @@ _Tags_ are key-value pairs that help you manage, filter, and search for your loc + * `--agent-arns` – Specify the DataSync agents that you want to connect to your object storage server. + @@ -148,0 +149,2 @@ _Tags_ are key-value pairs that help you manage, filter, and search for your loc +You can also provide additional parameters for securing your keys using AWS Secrets Manager. For more information, see [Providing credentials for storage locations](https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html). +