AWS mwaa documentation change
Summary
Changed link references from 'see' to 'refer to' in multiple sections for consistency
Security assessment
The changes are purely stylistic/grammatical adjustments to link references. No security-related content was added, removed, or modified. The security-related sections (IAM access control, KMS encryption, VPC endpoints) maintain the same security guidance as before.
Diff
diff --git a/mwaa/latest/migrationguide/mwaa-architecture.md b/mwaa/latest/migrationguide/mwaa-architecture.md index 7e5910854..9cb34573f 100644 --- a//mwaa/latest/migrationguide/mwaa-architecture.md +++ b//mwaa/latest/migrationguide/mwaa-architecture.md @@ -24 +24 @@ Amazon MWAA environments consist of the following four main components: - 1. **Scheduler** — Parses and monitors all of your DAGs, and queues tasks for execution when a DAG's dependencies are met. Amazon MWAA deploys the scheduler as a AWS Fargate cluster with a minimum of 2 schedulers. You can increase the scheduler count up to five, depending on your workload. For more information about Amazon MWAA environment classes, see [Amazon MWAA environment class](https://docs.aws.amazon.com/mwaa/latest/userguide/environment-class.html). + 1. **Scheduler** — Parses and monitors all of your DAGs, and queues tasks for execution when a DAG's dependencies are met. Amazon MWAA deploys the scheduler as a AWS Fargate cluster with a minimum of 2 schedulers. You can increase the scheduler count up to five, depending on your workload. For more information about Amazon MWAA environment classes, refer to [Amazon MWAA environment class](https://docs.aws.amazon.com/mwaa/latest/userguide/environment-class.html). @@ -26 +26 @@ Amazon MWAA environments consist of the following four main components: - 2. **Workers** — One or more Fargate tasks that runs your scheduled tasks. The number of workers for your environment is determined by a range between a _minimum_ and _maximum_ number that you specify. Amazon MWAA starts auto-scaling workers when the number of queued and running tasks is more than your existing workers can handle. When running and queued tasks sum to zero for more than two minutes, Amazon MWAA scales back the number of workers to its minimum. For more information about how Amazon MWAA handles auto-scaling workers, see [Amazon MWAA automatic scaling](https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-autoscaling.html). + 2. **Workers** — One or more Fargate tasks that runs your scheduled tasks. The number of workers for your environment is determined by a range between a _minimum_ and _maximum_ number that you specify. Amazon MWAA starts auto-scaling workers when the number of queued and running tasks is more than your existing workers can handle. When running and queued tasks sum to zero for more than two minutes, Amazon MWAA scales back the number of workers to its minimum. For more information about how Amazon MWAA handles auto-scaling workers, refer to [Amazon MWAA automatic scaling](https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-autoscaling.html). @@ -28 +28 @@ Amazon MWAA environments consist of the following four main components: - 3. **Web server** — Runs the Apache Airflow web UI. You can configure the web server with [private or public](https://docs.aws.amazon.com/mwaa/latest/userguide/vpc-vpe-access.html#vpc-vpe-about) network access. In both cases, access to your Apache Airflow users is controlled by the access control policy you define in AWS Identity and Access Management (IAM). For more information about configuring IAM access policies for your environment, see [Accessing an Amazon MWAA environment](https://docs.aws.amazon.com/mwaa/latest/userguide/access-policies.html). + 3. **Web server** — Runs the Apache Airflow web UI. You can configure the web server with [private or public](https://docs.aws.amazon.com/mwaa/latest/userguide/vpc-vpe-access.html#vpc-vpe-about) network access. In both cases, access to your Apache Airflow users is controlled by the access control policy you define in AWS Identity and Access Management (IAM). For more information about configuring IAM access policies for your environment, refer to [Accessing an Amazon MWAA environment](https://docs.aws.amazon.com/mwaa/latest/userguide/access-policies.html). @@ -43 +43 @@ The service Amazon VPC is not a shared VPC. Amazon MWAA creates an AWS owned VPC - * **Amazon S3** — Amazon MWAA stores all of your workflow resources, such as DAGs, requirements, and plugin files in an Amazon S3 bucket. For more information about creating the bucket as part of environment creation, and uploading your Amazon MWAA resources, see [Create an Amazon S3 bucket for Amazon MWAA](https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-s3-bucket.html) in the _Amazon MWAA User Guide_. + * **Amazon S3** — Amazon MWAA stores all of your workflow resources, such as DAGs, requirements, and plugin files in an Amazon S3 bucket. For more information about creating the bucket as part of environment creation, and uploading your Amazon MWAA resources, refer to [Create an Amazon S3 bucket for Amazon MWAA](https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-s3-bucket.html) in the _Amazon MWAA User Guide_. @@ -49 +49 @@ The service Amazon VPC is not a shared VPC. Amazon MWAA creates an AWS owned VPC - * **AWS KMS** — Amazon MWAA uses AWS KMS to ensure your data is secure at rest. By default, Amazon MWAA uses [AWS managed AWS KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk), but you can configure your environment to use your own [customer-managed](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#customer-cmk) AWS KMS key. For more information about using your own customer-managed AWS KMS key, see [Customer managed keys for Data Encryption](https://docs.aws.amazon.com/mwaa/latest/userguide/custom-keys-certs.html) in the _Amazon MWAA User Guide_. + * **AWS KMS** — Amazon MWAA uses AWS KMS to ensure your data is secure at rest. By default, Amazon MWAA uses [AWS managed AWS KMS keys](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-managed-cmk), but you can configure your environment to use your own [customer-managed](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#customer-cmk) AWS KMS key. For more information about using your own customer-managed AWS KMS key, refer to [Customer managed keys for Data Encryption](https://docs.aws.amazon.com/mwaa/latest/userguide/custom-keys-certs.html) in the _Amazon MWAA User Guide_. @@ -58 +58 @@ The service Amazon VPC is not a shared VPC. Amazon MWAA creates an AWS owned VPC -Your Amazon MWAA environment needs access to all AWS services it integrates with. The Amazon MWAA [execution role](https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-create-role.html) controls how access is granted to Amazon MWAA to connect to other AWS services on your behalf. For network connectivity, you can either provide public internet access to your Amazon VPC or create Amazon VPC endpoints. For more information on configuring Amazon VPC endpoints (AWS PrivateLink) for your environment, see [Managing access to VPC endpoints on Amazon MWAA](https://docs.aws.amazon.com/mwaa/latest/userguide/vpc-vpe-access.html) in the _Amazon MWAA User Guide_. +Your Amazon MWAA environment needs access to all AWS services it integrates with. The Amazon MWAA [execution role](https://docs.aws.amazon.com/mwaa/latest/userguide/mwaa-create-role.html) controls how access is granted to Amazon MWAA to connect to other AWS services on your behalf. For network connectivity, you can either provide public internet access to your Amazon VPC or create Amazon VPC endpoints. For more information on configuring Amazon VPC endpoints (AWS PrivateLink) for your environment, refer to [Managing access to VPC endpoints on Amazon MWAA](https://docs.aws.amazon.com/mwaa/latest/userguide/vpc-vpe-access.html) in the _Amazon MWAA User Guide_. @@ -64 +64 @@ When you configure the Apache Airflow in [private mode](https://docs.aws.amazon. -For more information about networking, see [Networking](https://docs.aws.amazon.com/mwaa/latest/userguide/networking.html) in the _Amazon MWAA User Guide_. +For more information about networking, refer to [Networking](https://docs.aws.amazon.com/mwaa/latest/userguide/networking.html) in the _Amazon MWAA User Guide_.