AWS res documentation change
Summary
Updated terminology definitions and grammatical improvements, including clarification of project boundaries for data isolation
Security assessment
The change clarifies project boundaries preventing data/VDI host sharing, which relates to security through isolation. However, there's no evidence of addressing a specific vulnerability.
Diff
diff --git a/res/archive/release-minus-4/ug/concepts-and-definitions.md b/res/archive/release-minus-4/ug/concepts-and-definitions.md index d30c4e330..d0701fa58 100644 --- a//res/archive/release-minus-4/ug/concepts-and-definitions.md +++ b//res/archive/release-minus-4/ug/concepts-and-definitions.md @@ -7 +7 @@ -This section describes key concepts and defines terminology specific to this product: +This section describes key concepts and defines terminology specific to Research and Engineering Studio on AWS: @@ -12 +12 @@ This section describes key concepts and defines terminology specific to this pro -A file browser is a part of the RES user interface where currently logged-in users can view their file system. +A file browser is a part of the RES user interface where users who are currently logged-in can view their file system. @@ -27 +27 @@ An administrative delegate with access to RES resources that are shared across a -A project is a logical partition within the application that serves as a distinct boundary for data and compute resources, ensuring governance over data flow and preventing data and VDI host sharing across projects. +A project is a logical partition within the application that serves as a distinct boundary for data and compute resources; this ensures governance over data flow and prevents sharing data and VDI hosts across projects. @@ -37 +37 @@ Project-based permissions describes a logical partition of both data and VDI hos -An end user of RES resources (VDI, storage, etc). Scope and permissions are restricted to projects they are assigned to. They cannot delegate or assign any permissions. +An end user of RES resources (VDI, storage, etc). Scope and permissions are restricted to the projects they are assigned to. They cannot delegate or assign any permissions. @@ -42 +42 @@ An end user of RES resources (VDI, storage, etc). Scope and permissions are rest -An administrative delegate with access to and ownership over a specific project. Scope and permissions are restricted to the project(s) they own. They can assign permissions to project members in the projects they own. +An administrative delegate with access to, and ownership over, a specific project. Scope and permissions are restricted to the project(s) they own. They can assign permissions to project members in the projects they own. @@ -54 +54 @@ Virtual desktop instance (VDI) hosts allow project members to access project-spe -For a general reference of AWS terms, see the [AWS glossary](https://docs.aws.amazon.com/general/latest/gr/glos-chap.html) in the AWS General Reference. +For a general reference of AWS terms, see the [AWS glossary](https://docs.aws.amazon.com/general/latest/gr/glos-chap.html) in the _AWS General Reference_.