AWS wellarchitected documentation change
Summary
Removed phrase about use cases for secrets management services
Security assessment
Simplification of existing security documentation without altering security guidance. The removed text did not introduce or mitigate security issues.
Diff
diff --git a/wellarchitected/latest/security-pillar/sec_permissions_define.md b/wellarchitected/latest/security-pillar/sec_permissions_define.md index 9e664598c..0c48bc0e4 100644 --- a//wellarchitected/latest/security-pillar/sec_permissions_define.md +++ b//wellarchitected/latest/security-pillar/sec_permissions_define.md @@ -32 +32 @@ When defining access requirements for non-human identities, determine which appl -AWS services, such as [AWS Secrets Manager](https://aws.amazon.com/blogs/security/identify-arrange-manage-secrets-easily-using-enhanced-search-in-aws-secrets-manager/) and [AWS Systems Manager Parameter Store](https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html), can help decouple secrets from the application or workload securely in cases where it's not feasible to use IAM roles. In Secrets Manager, you can establish automatic rotation for your credentials. You can use Systems Manager to reference parameters in your scripts, commands, SSM documents, configuration, and automation workflows by using the unique name that you specified when you created the parameter. +AWS services, such as [AWS Secrets Manager](https://aws.amazon.com/blogs/security/identify-arrange-manage-secrets-easily-using-enhanced-search-in-aws-secrets-manager/) and [AWS Systems Manager Parameter Store](https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-parameter-store.html), can help decouple secrets from the application or workload securely. In Secrets Manager, you can establish automatic rotation for your credentials. You can use Systems Manager to reference parameters in your scripts, commands, SSM documents, configuration, and automation workflows by using the unique name that you specified when you created the parameter.