AWS datasync medium security documentation change
Summary
Updated documentation to support IPv6 addresses for SMB file server DNS and domain/IP configuration. Fixed 'prinicpal' typo to 'principal'. Added note clarifying Kerberos authentication requires domain name.
Security assessment
The change enforces that Kerberos authentication requires a domain name, preventing misconfigurations that could lead to authentication failures or insecure connections. The IPv6 support itself is a feature update, but the Kerberos note directly addresses secure configuration practices.
Diff
diff --git a/datasync/latest/userguide/API_CreateLocationSmb.md b/datasync/latest/userguide/API_CreateLocationSmb.md index 1a6a6262f..a88f51512 100644 --- a//datasync/latest/userguide/API_CreateLocationSmb.md +++ b//datasync/latest/userguide/API_CreateLocationSmb.md @@ -76 +76 @@ Required: No -Specifies the IPv4 addresses for the DNS servers that your SMB file server belongs to. This parameter applies only if `AuthenticationType` is set to `KERBEROS`. +Specifies the IPv4 or IPv6 addresses for the DNS servers that your SMB file server belongs to. This parameter applies only if `AuthenticationType` is set to `KERBEROS`. @@ -134 +134 @@ Required: No -Specifies a Kerberos prinicpal, which is an identity in your Kerberos realm that has permission to access the files, folders, and file metadata in your SMB file server. +Specifies a Kerberos principal, which is an identity in your Kerberos realm that has permission to access the files, folders, and file metadata in your SMB file server. @@ -173,8 +173 @@ Required: No -Specifies the domain name or IP address of the SMB file server that your DataSync agent connects to. - -Remember the following when configuring this parameter: - - * You can't specify an IP version 6 (IPv6) address. - - * If you're using Kerberos authentication, you must specify a domain name. - +Specifies the domain name or IP address (IPv4 or IPv6) of the SMB file server that your DataSync agent connects to. @@ -181,0 +175 @@ Remember the following when configuring this parameter: +###### Note @@ -182,0 +177 @@ Remember the following when configuring this parameter: +If you're using Kerberos authentication, you must specify a domain name.