AWS AWSCloudFormation documentation change
Summary
Clarified KMS key defaults and configuration requirements for different FileSystemType values
Security assessment
Added documentation about default FSx-managed KMS keys for encryption, which relates to security best practices for data protection. No evidence of addressing a specific security vulnerability, but enhances clarity on encryption configuration.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-fsx-filesystem.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-fsx-filesystem.md index 3259f5106..073896b8e 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-fsx-filesystem.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-fsx-filesystem.md @@ -152,0 +153,2 @@ The ID of the AWS Key Management Service (AWS KMS) key used to encrypt Amazon FS +If this ID isn't specified, the Amazon FSx-managed key for your account is used. For more information, see [Encrypt](https://docs.aws.amazon.com/kms/latest/APIReference/API_Encrypt.html) in the _AWS Key Management Service API Reference_. + @@ -162 +164 @@ _Required_ : No -The Lustre configuration for the file system being created. +The Lustre configuration for the file system being created. This configuration is required if the `FileSystemType` is set to `LUSTRE`. @@ -188 +190 @@ _Required_ : Conditional -The ONTAP configuration properties of the FSx for ONTAP file system that you are creating. +The ONTAP configuration properties of the FSx for ONTAP file system that you are creating. This configuration is required if the `FileSystemType` is set to `ONTAP`. @@ -190 +192 @@ The ONTAP configuration properties of the FSx for ONTAP file system that you are -_Required_ : No +_Required_ : Conditional @@ -199 +201 @@ _Required_ : No -The Amazon FSx for OpenZFS configuration properties for the file system that you are creating. +The Amazon FSx for OpenZFS configuration properties for the file system that you are creating. This configuration is required if the `FileSystemType` is set to `OPENZFS`. @@ -201 +203 @@ The Amazon FSx for OpenZFS configuration properties for the file system that you -_Required_ : No +_Required_ : Conditional @@ -322,3 +324 @@ _Required_ : No -The configuration object for the Microsoft Windows file system you are creating. - -This value is required if `FileSystemType` is set to `WINDOWS`. +The configuration object for the Microsoft Windows file system you are creating. This configuration is required if `FileSystemType` is set to `WINDOWS`.