AWS datasync documentation change
Summary
Updated agent requirements and configuration steps for cloud object storage transfers. Added clarification about agent usage with Enhanced/Basic modes, removed agent selection from UI steps, added folder prefix field, and integrated AWS Secrets Manager for credential storage.
Security assessment
The change introduces integration with AWS Secrets Manager for storing credentials ('provide an AWS Secrets Manager secret that contains the key'), which is a security best practice improvement but doesn't address a specific known vulnerability. No evidence of a patched security issue is present.
Diff
diff --git a/datasync/latest/userguide/creating-other-cloud-object-location.md b/datasync/latest/userguide/creating-other-cloud-object-location.md index 07d40fbc4..be7b12936 100644 --- a//datasync/latest/userguide/creating-other-cloud-object-location.md +++ b//datasync/latest/userguide/creating-other-cloud-object-location.md @@ -32 +32,3 @@ With AWS DataSync, you can transfer data between [AWS storage services](./transf -To set up this kind of transfer, you need to create a DataSync [agent](./how-datasync-transfer-works.html#sync-agents) that can connect to your cloud object storage. You must also create a transfer [location](./how-datasync-transfer-works.html#sync-locations) for your cloud object storage (specifically an **Object storage** location). DataSync can use this location as a source or destination for your transfer. +A DataSync agent is required only when transferring data between storage systems in other clouds and Amazon EFS or Amazon FSx, or when using **Basic** mode tasks. You don't need an agent to transfer data between storage systems in other clouds and Amazon S3 using **Enhanced** mode. + +Regardless of whether you use an agent, you must also create a transfer [location](./how-datasync-transfer-works.html#sync-locations) for your cloud object storage (specifically an **Object storage** location). DataSync can use this location as a source or destination for your transfer. @@ -166 +168 @@ When transferring to Amazon S3, DataSync can't transfer objects larger than 5 TB -To get started, you need a DataSync agent that can connect to your cloud object storage. This process includes deploying and activating an agent on an Amazon EC2 instance in your virtual private cloud (VPC) in AWS. +A DataSync agent is required only when transferring data between storage systems in other clouds and Amazon EFS or Amazon FSx, or when using **Basic** mode tasks. You don't need an agent to transfer data between storage systems in other clouds and Amazon S3 using **Enhanced** mode. This section desribes how to deploy and activate an agent on an Amazon EC2 instance in your virtual private cloud (VPC) in AWS. @@ -197,5 +199 @@ Make sure that you know how DataSync accesses your cloud object storage. You als - 4. For **Agents** , choose the DataSync agent that can connect with your cloud object storage. - -You can choose more than one agent. For more information, see [Using multiple DataSync agents](./do-i-need-datasync-agent.html#multiple-agents). - - 5. For **Server** , enter the endpoint that DataSync can use to access your cloud object storage: + 4. For **Server** , enter the endpoint that DataSync can use to access your cloud object storage: @@ -221 +219,5 @@ You can choose more than one agent. For more information, see [Using multiple Da - 6. For **Bucket name** , enter the name of the object storage bucket that you're transferring data to or from. + 5. For **Bucket name** , enter the name of the object storage bucket that you're transferring data to or from. + + 6. For **Folder** , enter an object prefix. DataSync only transfers objects with this prefix. + + 7. If your transfer requires an agent, choose **Use agents** , then choose the DataSync agent that can connect with your cloud object storage. @@ -223 +225 @@ You can choose more than one agent. For more information, see [Using multiple Da - 7. Expand **Additional settings**. For **Server protocol** , choose **HTTPS**. For **Server port** , choose **443**. + 8. Expand **Additional settings**. For **Server protocol** , choose **HTTPS**. For **Server port** , choose **443**. @@ -225 +227 @@ You can choose more than one agent. For more information, see [Using multiple Da - 8. Scroll down to the **Authentication** section. Make sure that the **Requires credentials** check box is selected, and then provide DataSync your storage credentials. + 9. Scroll down to the **Authentication** section. Make sure that the **Requires credentials** check box is selected, and then provide DataSync your storage credentials. @@ -229 +231 @@ You can choose more than one agent. For more information, see [Using multiple Da - * For **Secret key** , enter the secret to access your cloud object storage. + * For **Secret key** , provide the secret key to access your cloud object storage. You can either enter the key directly, or specify an AWS Secrets Manager secret that contains the key. For more information, see [Providing credentials for storage locations](https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html). @@ -231 +233 @@ You can choose more than one agent. For more information, see [Using multiple Da - 9. (Optional) Enter values for the **Key** and **Value** fields to tag the location. + 10. (Optional) Enter values for the **Key** and **Value** fields to tag the location. @@ -235 +237 @@ Tags help you manage, filter, and search for your AWS resources. We recommend cr - 10. Choose **Create location**. + 11. Choose **Create location**.