AWS solutions documentation change
Summary
Updated terminology from 'solution' to 'guidance' throughout the document, along with URL updates and minor phrasing changes
Security assessment
The changes are primarily terminology updates (solution -> guidance) and URL corrections. No new security content was added and no specific vulnerabilities are addressed. Security-related statements about IAM roles, VPC endpoints, and security groups remain substantively unchanged.
Diff
diff --git a/solutions/latest/clickstream-analytics-on-aws/security-1.md b/solutions/latest/clickstream-analytics-on-aws/security-1.md index ca91760f9..dd95029e1 100644 --- a//solutions/latest/clickstream-analytics-on-aws/security-1.md +++ b//solutions/latest/clickstream-analytics-on-aws/security-1.md @@ -3 +3 @@ -[Documentation](/index.html)[Clickstream Analytics on AWS](https://aws.amazon.com/solutions/implementations/clickstream-analytics-on-aws)[Implementation Guide](solution-overview.html) +[Documentation](/index.html)[Guidance for Clickstream Analytics on AWS](https://aws.amazon.com/solutions/guidance/clickstream-analytics-on-aws/)[Implementation Guide](solution-overview.html) @@ -13 +13 @@ When you build systems on AWS infrastructure, security responsibilities are shar -AWS Identity and Access Management (IAM) roles allow customers to assign granular access policies and permissions to services and users on the AWS Cloud. This solution creates IAM roles that grant the solution’s AWS Lambda functions, Amazon API Gateway and Amazon Cognito or OpenID connect access to create regional resources. +AWS Identity and Access Management (IAM) roles allow customers to assign granular access policies and permissions to services and users on the AWS Cloud. This guidance creates IAM roles that grant the guidance's AWS Lambda functions, Amazon API Gateway and Amazon Cognito or OpenID connect access to create regional resources. @@ -17 +17 @@ AWS Identity and Access Management (IAM) roles allow customers to assign granula -This solution optionally deploys a web console within your VPC. You can isolate access to the web console via Bastion hosts, VPNs, or Direct Connect. You can create [VPC endpoints](https://docs.aws.amazon.com/whitepapers/latest/aws-privatelink/what-are-vpc-endpoints.html) to let traffic between your Amazon VPC and AWS services not leave the Amazon network to satisfy the compliance requirements. +This guidance optionally deploys a web console within your VPC. You can isolate access to the web console via Bastion hosts, VPNs, or Direct Connect. You can create [VPC endpoints](https://docs.aws.amazon.com/whitepapers/latest/aws-privatelink/what-are-vpc-endpoints.html) to let traffic between your Amazon VPC and AWS services not leave the Amazon network to satisfy the compliance requirements. @@ -21 +21 @@ This solution optionally deploys a web console within your VPC. You can isolate -The security groups created in this solution are designed to control and isolate network traffic between the solution components. We recommend that you review the security groups and further restrict access as needed once the deployment is up and running. +The security groups created in this guidance are designed to control and isolate network traffic between the guidance components. We recommend that you review the security groups and further restrict access as needed once the deployment is up and running. @@ -25 +25 @@ The security groups created in this solution are designed to control and isolate -This solution optionally deploys a web console hosted in an Amazon S3 bucket and Amazon API Gateway. To help reduce latency and improve security, this solution includes an Amazon CloudFront distribution with an Origin Access Control (OAC), which is a CloudFront user that provides public access to the solution’s website bucket contents. For more information, refer to [Restricting access to an Amazon S3 origin](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html) in the Amazon CloudFront Developer Guide. +This guidance optionally deploys a web console hosted in an Amazon S3 bucket and Amazon API Gateway. To help reduce latency and improve security, this guidance includes an Amazon CloudFront distribution with an Origin Access Control (OAC), which is a CloudFront user that provides public access to the guidance's website bucket contents. For more information, refer to [Restricting access to an Amazon S3 origin](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/private-content-restricting-access-to-s3.html) in the Amazon CloudFront Developer Guide.