AWS wellarchitected documentation change
Summary
Removed redundant phrase about IAM roles feasibility
Security assessment
Simplifies text without altering security guidance for secrets management.
Diff
diff --git a/wellarchitected/2025-02-25/framework/sec_permissions_define.md b/wellarchitected/2025-02-25/framework/sec_permissions_define.md index 5e1c3f7fb..a92a3d2d7 100644 --- a//wellarchitected/2025-02-25/framework/sec_permissions_define.md +++ b//wellarchitected/2025-02-25/framework/sec_permissions_define.md @@ -32 +32 @@ When defining access requirements for non-human identities, determine which appl -AWS services, such as [AWS Secrets Manager](https://aws.amazon.com/blogs/security/identify-arrange-manage-secrets-easily-using-enhanced-search-in-aws-secrets-manager/) and [AWS Systems Manager Parameter Store](https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html), can help decouple secrets from the application or workload securely in cases where it's not feasible to use IAM roles. In Secrets Manager, you can establish automatic rotation for your credentials. You can use Systems Manager to reference parameters in your scripts, commands, SSM documents, configuration, and automation workflows by using the unique name that you specified when you created the parameter. +AWS services, such as [AWS Secrets Manager](https://aws.amazon.com/blogs/security/identify-arrange-manage-secrets-easily-using-enhanced-search-in-aws-secrets-manager/) and [AWS Systems Manager Parameter Store](https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html), can help decouple secrets from the application or workload securely. In Secrets Manager, you can establish automatic rotation for your credentials. You can use Systems Manager to reference parameters in your scripts, commands, SSM documents, configuration, and automation workflows by using the unique name that you specified when you created the parameter.