AWS managed-flink documentation change
Summary
Updated service references to 'Amazon MSF', added customer-managed keys support, and restructured encryption documentation
Security assessment
Introduces customer-managed keys for encryption at rest, significantly enhancing data control. This is a security feature addition with no evidence of vulnerability remediation.
Diff
diff --git a/managed-flink/latest/java/data-protection.md b/managed-flink/latest/java/data-protection.md index c0f63ff9d..b27f4120e 100644 --- a//managed-flink/latest/java/data-protection.md +++ b//managed-flink/latest/java/data-protection.md @@ -11 +11 @@ Amazon Managed Service for Apache Flink (Amazon MSF) was previously known as Ama -You can protect your data using tools that are provided by AWS. Managed Service for Apache Flink can work with services that support encrypting data, including Firehose, and Amazon S3. +You can protect your data using tools that are provided by AWS. Amazon MSF can work with services that support encrypting data, including Firehose, and Amazon S3. @@ -17 +17 @@ You can protect your data using tools that are provided by AWS. Managed Service -Note the following about encrypting data at rest with Managed Service for Apache Flink: +Note the following about encrypting data at rest with Amazon MSF: @@ -23 +23 @@ Note the following about encrypting data at rest with Managed Service for Apache - * Managed Service for Apache Flink can read from any streaming source, and write to any streaming or database destination. Ensure that your sources and destinations encrypt all data in transit and data at rest. + * Amazon MSF can read from any streaming source, and write to any streaming or database destination. Ensure that your sources and destinations encrypt all data in transit and data at rest. @@ -36 +36 @@ Note the following about encrypting data at rest with Managed Service for Apache -Managed Service for Apache Flink encrypts all data in transit. Encryption in transit is enabled for all Managed Service for Apache Flink applications and cannot be disabled. +Amazon MSF encrypts all data in transit. Encryption in transit is enabled for all Amazon MSF applications and cannot be disabled. @@ -38 +38 @@ Managed Service for Apache Flink encrypts all data in transit. Encryption in tra -Managed Service for Apache Flink encrypts data in transit in the following scenarios: +Amazon MSF encrypts data in transit in the following scenarios: @@ -40 +40 @@ Managed Service for Apache Flink encrypts data in transit in the following scena - * Data in transit from Kinesis Data Streams to Managed Service for Apache Flink. + * Data in transit from Kinesis Data Streams to Amazon MSF. @@ -42 +42 @@ Managed Service for Apache Flink encrypts data in transit in the following scena - * Data in transit between internal components within Managed Service for Apache Flink. + * Data in transit between internal components within Amazon MSF. @@ -44 +44 @@ Managed Service for Apache Flink encrypts data in transit in the following scena - * Data in transit between Managed Service for Apache Flink and Firehose. + * Data in transit between Amazon MSF and Firehose. @@ -51 +51 @@ Managed Service for Apache Flink encrypts data in transit in the following scena -Data encryption in Managed Service for Apache Flink uses service-managed keys. Customer managed keys are not supported. +In Amazon MSF, you can use either service managed or your own customer managed keys to encrypt data. For more information, see [Key management in Amazon Managed Service for Apache Flink](./key-management-flink.html). @@ -61 +61 @@ Security in Managed Service for Apache Flink -Identity and Access Management for Managed Service for Apache Flink +Key management in Amazon MSF