AWS quicksight documentation change
Summary
Generalized terminology from 'dataset' to 'data' and improved revocation documentation
Security assessment
Clarifies encryption key management processes without evidence of resolving security issues.
Diff
diff --git a/quicksight/latest/user/customer-managed-key-revoke-access.md b/quicksight/latest/user/customer-managed-key-revoke-access.md index f02c29edd..f288555fe 100644 --- a//quicksight/latest/user/customer-managed-key-revoke-access.md +++ b//quicksight/latest/user/customer-managed-key-revoke-access.md @@ -5 +5 @@ -# Revoking access to a CMK-encrypted dataset +# Revoking access to CMK-encrypted QuickSight data @@ -7 +7 @@ -You can revoke access to your CMK-encrypted SPICE datasets. When you revoke access to a key that is used to encrypt a dataset, access to the dataset is denied until you undo the revoke. The following methods are examples of how you can revoke access: +You can revoke access to your CMK-encrypted QuickSight data. When you revoke access to a key that is used to encrypt your QuickSight data, access to the data is denied until you undo the revoke. The following methods are examples of how you can revoke access: @@ -16 +16,3 @@ You can revoke access to your CMK-encrypted SPICE datasets. When you revoke acce -Use the following procedure to revoke access to your CMK-encrypted datasets in AWS KMS. +To learn more about which data can be managed with the key, see [Encrypting your QuickSight data with AWS Key Management Service customer-managed keys](./customer-managed-keys.html). + +Use the following procedure to revoke access to your CMK-encrypted QuickSight data in AWS KMS. @@ -35 +37 @@ To prevent further use of the CMK, you could add a `Deny` policy in AWS Identity -After you revoke access by using any method, it can take up to 15 minutes for the SPICE dataset to become inaccessible. +After you revoke access by using any method, it can take up to 15 minutes for the data to become inaccessible. @@ -45 +47 @@ Audit key usage -Recover an encrypted resource +Recover encrypted data