AWS transform high security documentation change
Summary
Clarified default VPC usage and emphasized enabling SecureTransport for S3 buckets
Security assessment
Highlighting the lack of SecureTransport by default in S3 buckets warns users to enforce HTTPS, preventing data interception. This mitigates a misconfiguration risk with security implications.
Diff
diff --git a/transform/latest/userguide/transform-vmware-connect-target-account.md b/transform/latest/userguide/transform-vmware-connect-target-account.md index 6aedaa354..a6bddfcb7 100644 --- a//transform/latest/userguide/transform-vmware-connect-target-account.md +++ b//transform/latest/userguide/transform-vmware-connect-target-account.md @@ -9 +9 @@ The target account is where your network will be deployed and where your migrate -To create a target account connector, the target AWS account must have a default VPC in your target AWS Region. For information about how to create a default VPC if the account doesn't have one, see [Create a default VPC](https://docs.aws.amazon.com/vpc/latest/userguide/work-with-default-vpc.html#create-default-vpc) in the _Amazon VPC User Guide_. +To create a target account connector, the target AWS account must have a default VPC in your target AWS Region. The default VPC is used by AWS Transform to stage data from your source servers for replication to AWS. For information about how to create a default VPC if the account doesn't have one, see [Create a default VPC](https://docs.aws.amazon.com/vpc/latest/userguide/work-with-default-vpc.html#create-default-vpc) in the _Amazon VPC User Guide_. @@ -13 +13,6 @@ To create a target account connector, the target AWS account must have a default -AWS Transform will create an Amazon S3 bucket on your behalf in this target AWS account. This bucket won't have `SecureTransport` enabled by default. If you want the bucket policy to include secure transport, you must update the policy yourself. For more information, see [Security best practices for Amazon S3](https://docs.aws.amazon.com/AmazonS3/latest/userguide/security-best-practices.html). + * To create a target account connector, the target AWS account must have a default VPC in your target AWS Region. The default VPC is used by AWS Transform to stage data from your source servers for replication to AWS. For information about how to create a default VPC if the account doesn't have one, see [Create a default VPC](https://docs.aws.amazon.com/vpc/latest/userguide/work-with-default-vpc.html#create-default-vpc) in the _Amazon VPC User Guide_. + + * AWS Transform will create an Amazon S3 bucket on your behalf in this target AWS account. This bucket won't have `SecureTransport` enabled by default. If you want the bucket policy to include secure transport, you must update the policy yourself. For more information, see [Security best practices for Amazon S3](https://docs.aws.amazon.com/AmazonS3/latest/userguide/security-best-practices.html). + + +