AWS documentdb medium security documentation change
Summary
Removed details about requiring signed requests with access keys or AWS STS temporary credentials
Security assessment
The removed content described fundamental security controls for API access (signing requirements and temporary credentials). Omitting this could lead to misunderstandings about authentication requirements, potentially resulting in insecure configurations.
Diff
diff --git a/documentdb/latest/developerguide/security.infrastructure.md b/documentdb/latest/developerguide/security.infrastructure.md index c1912b1f4..f45139cf4 100644 --- a//documentdb/latest/developerguide/security.infrastructure.md +++ b//documentdb/latest/developerguide/security.infrastructure.md @@ -18,2 +17,0 @@ You use AWS published API calls to access Amazon DocumentDB through the network. -Additionally, requests must be signed by using an access key ID and a secret access key that is associated with an IAM principal. Or you can use the [AWS Security Token Service](https://docs.aws.amazon.com/STS/latest/APIReference/welcome.html) (AWS STS) to generate temporary security credentials to sign requests. -