AWS emr documentation change
Summary
Updated S3 Express One Zone encryption support to include SSE-KMS
Security assessment
Expands documentation of supported encryption methods (SSE-KMS) but does not resolve a security flaw. Enhances security feature awareness.
Diff
diff --git a/emr/latest/ManagementGuide/emr-express-one-zone.md b/emr/latest/ManagementGuide/emr-express-one-zone.md index d90739f42..26604fdf2 100644 --- a//emr/latest/ManagementGuide/emr-express-one-zone.md +++ b//emr/latest/ManagementGuide/emr-express-one-zone.md @@ -159,3 +159 @@ Consider the following when you integrate Apache Spark on Amazon EMR with the S3 - * The Amazon S3 Express One Zone storage class is only supported with Spark on an Amazon EMR cluster that runs on Amazon EC2. - - * The Amazon S3 Express One Zone storage class only supports SSE-S3 encryption. For more information, see [Server-side encryption with Amazon S3 managed keys (SSE-S3)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-data-protection.html#s3-express-ecnryption). + * The Amazon S3 Express One Zone storage class supports SSE-S3 and SSE-KMS encryption. For more information, see [Server-side encryption with Amazon S3](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-data-protection.html#s3-express-ecnryption).