AWS res documentation change
Summary
Updated secret name formatting with backticks, added directoryservice-ServiceAccountUserDN entry, and modified DynamoDB table reference syntax
Security assessment
The change adds documentation for a new directory service account DN secret and improves secret name formatting. While this enhances clarity about security-related secrets, there's no evidence of addressing a specific vulnerability. The updates improve documentation accuracy but don't directly resolve a security issue.
Diff
diff --git a/res/archive/release-minus-4/ug/secrets-management.md b/res/archive/release-minus-4/ug/secrets-management.md index 85f6a58f7..3975f2499 100644 --- a//res/archive/release-minus-4/ug/secrets-management.md +++ b//res/archive/release-minus-4/ug/secrets-management.md @@ -11,15 +11,14 @@ Secret name | Description | RES generated | Admin entered -<envname>-sso-client-secret | Single Sign-On OAuth2 Client Secret for environment | ✓ | -<envname>-vdc-client-secret | vdc ClientSecret | ✓ | -<envname>-vdc-client-id | vdc ClientId | ✓ | -<envname>-vdc-gateway-certificate-private-key | Self-Signed certificate private key for domain | ✓ | -<envname>-vdc-gateway-certificate-certificate | Self-Signed certificate for domain | ✓ | -<envname>-cluster-manager-client-secret | cluster-manager ClientSecret | ✓ | -<envname>-cluster-manager-client-id | cluster-manager ClientId | ✓ | -<envname>-external-private-key | Self-Signed certificate private key for domain | ✓ | -<envname>-external-certificate | Self-Signed certificate for domain | ✓ | -<envname>-internal-private-key | Self-Signed certificate private key for domain | ✓ | -<envname>-internal-certificate | Self-Signed certificate for domain | ✓ | -<envname>-directoryservice-ServiceAccountUsername | | | ✓ -<envname>-directoryservice-ServiceAccountPassword | | | ✓ - -The following secret ARN values are contained in the <envname>-cluster-settings table in DynamoDB: +``<envname>`-sso-client-secret` | Single Sign-On OAuth2 Client Secret for environment | ✓ | +``<envname>`-vdc-client-secret` | vdc ClientSecret | ✓ | +``<envname>`-vdc-client-id` | vdc ClientId | ✓ | +``<envname>`-vdc-gateway-certificate-private-key` | Self-Signed certificate private key for domain | ✓ | +``<envname>`-vdc-gateway-certificate-certificate` | Self-Signed certificate for domain | ✓ | +``<envname>`-cluster-manager-client-secret` | cluster-manager ClientSecret | ✓ | +``<envname>`-cluster-manager-client-id` | cluster-manager ClientId | ✓ | +``<envname>`-external-private-key` | Self-Signed certificate private key for domain | ✓ | +``<envname>`-external-certificate` | Self-Signed certificate for domain | ✓ | +``<envname>`-internal-private-key` | Self-Signed certificate private key for domain | ✓ | +``<envname>`-internal-certificate` | Self-Signed certificate for domain | ✓ | +``<envname>`-directoryservice-ServiceAccountUserDN` | The Distinguished Name (DN) attribute of the ServiceAccount user. | ✓ | + +The following secret ARN values are contained in the ``<envname>`-cluster-settings` table in DynamoDB: @@ -29,12 +28,12 @@ Key | Source -identity-provider.cognito.sso_client_secret | -vdc.dcv_connection_gateway.certificate.certificate_secret_arn | stack -vdc.dcv_connection_gateway.certificate.private_key_secret_arn | stack -cluster.load_balancers.internal_alb.certificates.private_key_secret_arn | stack -directoryservice.root_username_secret_arn | -vdc.client_secret | stack -cluster.load_balancers.external_alb.certificates.certificate_secret_arn | stack -cluster.load_balancers.internal_alb.certificates.certificate_secret_arn | stack -directoryservice.root_password_secret_arn | -cluster.secretsmanager.kms_key_id | -cluster.load_balancers.external_alb.certificates.private_key_secret_arn | stack -cluster-manager.client_secret | +`identity-provider.cognito.sso_client_secret` | +`vdc.dcv_connection_gateway.certificate.certificate_secret_arn` | stack +`vdc.dcv_connection_gateway.certificate.private_key_secret_arn` | stack +`cluster.load_balancers.internal_alb.certificates.private_key_secret_arn` | stack +`directoryservice.root_username_secret_arn` | +`vdc.client_secret` | stack +`cluster.load_balancers.external_alb.certificates.certificate_secret_arn` | stack +`cluster.load_balancers.internal_alb.certificates.certificate_secret_arn` | stack +`directoryservice.root_password_secret_arn` | +`cluster.secretsmanager.kms_key_id` | +`cluster.load_balancers.external_alb.certificates.private_key_secret_arn` | stack +`cluster-manager.client_secret` | @@ -48 +47 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Amazon S3 buckets +Administrator guide