AWS emr documentation change
Summary
Editorial improvements to Secrets Manager integration documentation, including replacing 'see' with 'refer to' and minor rephrasing
Security assessment
Changes are editorial in nature, improving clarity of existing security documentation about secret management. No specific security vulnerabilities are addressed - maintains existing guidance about encryption and rotation.
Diff
diff --git a/emr/latest/EMR-Serverless-UserGuide/secrets-manager.md b/emr/latest/EMR-Serverless-UserGuide/secrets-manager.md index 00da23193..bacea7fc8 100644 --- a//emr/latest/EMR-Serverless-UserGuide/secrets-manager.md +++ b//emr/latest/EMR-Serverless-UserGuide/secrets-manager.md @@ -9 +9 @@ How secrets workCreate a secretSpecify secret referencesGrant access to the secr -AWS Secrets Manager is a secret storage service that you can use to protect database credentials, API keys, and other secret information. Then in your code, you can replace hardcoded credentials with an API call to Secrets Manager. This helps ensure that the secret can't be compromised by someone examining your code, because the secret isn't there. For an overview, see the [AWS Secrets Manager User Guide](https://docs.aws.amazon.com/secretsmanager/latest/userguide). +AWS Secrets Manager is a secret storage service for protecting database credentials, API keys, and other secret information. Then in your code, replace hardcoded credentials with an API call to Secrets Manager. This helps ensure that the secret can't be compromised by someone examining your code, because the secret isn't there. For an overview, refer to the [AWS Secrets Manager User Guide](https://docs.aws.amazon.com/secretsmanager/latest/userguide). @@ -11 +11 @@ AWS Secrets Manager is a secret storage service that you can use to protect data -Secrets Manager encrypts secrets using AWS Key Management Service keys. For more information, see [Secret encryption and decryption](https://docs.aws.amazon.com/secretsmanager/latest/userguide/security-encryption.html) in the _AWS Secrets Manager User Guide_. +Secrets Manager encrypts secrets using AWS Key Management Service keys. For more information, refer to [Secret encryption and decryption](https://docs.aws.amazon.com/secretsmanager/latest/userguide/security-encryption.html) in the _AWS Secrets Manager User Guide_. @@ -13 +13 @@ Secrets Manager encrypts secrets using AWS Key Management Service keys. For more -You can configure Secrets Manager to automatically rotate secrets for you according to a schedule that you specify. This enables you to replace long-term secrets with short-term ones, which helps to significantly reduce the risk of compromise. For more information, see [Rotate AWS Secrets Manager secrets](https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotating-secrets.html) in the _AWS Secrets Manager User Guide_. +You can configure Secrets Manager to automatically rotate secrets for you according to a schedule that you specify. This enables you to replace long-term secrets with short-term ones, which helps to significantly reduce the risk of compromise. For more information, refer to [Rotate AWS Secrets Manager secrets](https://docs.aws.amazon.com/secretsmanager/latest/userguide/rotating-secrets.html) in the _AWS Secrets Manager User Guide_. @@ -29 +29 @@ To create a secret, follow the steps in [Create an AWS Secrets Manager secret](h -The following examples show how to provide a secret in a configuration classification at `StartJobRun`. If you want to configure classifications for Secrets Manager at the application level, see [Default application configuration for EMR Serverless](./default-configs.html). +The following examples demonstrate how to provide a secret in a configuration classification at `StartJobRun`. If you want to configure classifications for Secrets Manager at the application level, refer to [Default application configuration for EMR Serverless](./default-configs.html). @@ -31 +31 @@ The following examples show how to provide a secret in a configuration classific -In the examples, replace ``SecretName`` with the name of the secret to retrieve. . For more information, see How to create a secret. +In the examples, replace ``SecretName`` with the name of the secret to retrieve. . For more information, refer to How to create a secret. @@ -129 +129 @@ In the examples, replace ``SecretName`` with the name of the secret to retrieve. -To allow EMR Serverless to retrieve the secret value from Secrets Manager, add the following policy statement to your secret when you create it. You must create your secret with the customer-managed KMS key for EMR Serverless to read the secret value. For more information, see [Permissions for the KMS key](https://docs.aws.amazon.com/secretsmanager/latest/userguide/security-encryption.html#security-encryption-authz) in the _AWS Secrets Manager User Guide_. +To allow EMR Serverless to retrieve the secret value from Secrets Manager, add the following policy statement to your secret when you create it. You must create your secret with the customer-managed KMS key for EMR Serverless to read the secret value. For more information, refer to [Permissions for the KMS key](https://docs.aws.amazon.com/secretsmanager/latest/userguide/security-encryption.html#security-encryption-authz) in the _AWS Secrets Manager User Guide_.