AWS vpn documentation change

Service: vpn · 2025-05-31 · Documentation medium

File: vpn/latest/s2svpn/VPNTunnels.md

Summary

Added documentation about Pre-shared key storage options (Standard/Secrets Manager)

Security assessment

Documents the new Secrets Manager integration for pre-shared key storage, which improves security practices but does not indicate resolution of a specific security vulnerability.

Diff

diff --git a/vpn/latest/s2svpn/VPNTunnels.md b/vpn/latest/s2svpn/VPNTunnels.md
index ebc040cba..5135c17c2 100644
--- a//vpn/latest/s2svpn/VPNTunnels.md
+++ b//vpn/latest/s2svpn/VPNTunnels.md
@@ -95,0 +96,12 @@ Default: A size /30 IPv4 CIDR block from the `169.254.0.0/16` range.
+**Pre-shared key storage**
+    
+
+The type of storage for the pre-shared key:
+
+  * **Standard** — The pre-shared key is stored directly in the Site-to-Site VPN service.
+
+  * **Secrets Manager** — The pre-shared key is stored using AWS Secrets Manager. For more information about Secrets Manager, see [Enhanced security features using Secrets Manager](./enhanced-security.html).
+
+
+
+