AWS AmazonECS medium security documentation change
Summary
Updated FIPS-140 documentation with proper standard naming and added CloudWatch dualstack FIPS endpoint limitation note.
Security assessment
The change explicitly documents FIPS-140 compliance considerations and adds a security-relevant limitation about CloudWatch monitoring in FIPS/IPv6 configurations. FIPS-140 is a cryptographic security standard, making this security-related.
Diff
diff --git a/AmazonECS/latest/developerguide/ecs-fips-compliance.md b/AmazonECS/latest/developerguide/ecs-fips-compliance.md index d92f3283c..79bbe38b0 100644 --- a//AmazonECS/latest/developerguide/ecs-fips-compliance.md +++ b//AmazonECS/latest/developerguide/ecs-fips-compliance.md @@ -9 +9 @@ AWS Fargate FIPS-140 ConsiderationsUse FIPS on FargateUse CloudTrail for Fargate -Federal Information Processing Standard (FIPS). FIPS-140 is a U.S. and Canadian government standard that specifies the security requirements for cryptographic modules that protect sensitive information. FIPS-140 defines a set of validated cryptography functions that can be used to encrypt data in transit and data at rest. +Federal Information Processing Standard (FIPS-140) is a U.S. and Canadian government standard that specifies the security requirements for cryptographic modules that protect sensitive information. FIPS-140 defines a set of validated cryptography functions that can be used to encrypt data in transit and data at rest. @@ -22,0 +23,2 @@ Consider the following when using FIPS-140 compliance on Fargate: + * Amazon CloudWatch doesn't support a dualstack FIPS endpoint that can be used to monitor Amazon ECS tasks in IPv6-only configuration that use FIPS-140 compliance. +