AWS pcs medium security documentation change
Summary
Added documentation about rotating cluster secrets through AWS Secrets Manager and updated section structure
Security assessment
The change introduces cluster secret rotation capabilities, which directly addresses security compliance and remediation of potential compromises. Previously, rotation was explicitly unsupported. This addition provides a security feature to mitigate risks associated with long-lived secrets.
Diff
diff --git a/pcs/latest/userguide/working-with_clusters_secrets.md b/pcs/latest/userguide/working-with_clusters_secrets.md index f71fb4f9e..b1c2deda3 100644 --- a//pcs/latest/userguide/working-with_clusters_secrets.md +++ b//pcs/latest/userguide/working-with_clusters_secrets.md @@ -9 +9 @@ As part of creating a cluster, AWS PCS creates a cluster secret that is required -AWS PCS stores the cluster secret as a [managed secret](https://docs.aws.amazon.com/secretsmanager/latest/userguide/integrating_pcs.html) with the prefix `pcs!` in AWS Secrets Manager. The cost of the secret is included in the charge for using AWS PCS. +AWS PCS stores the cluster secret as a [managed secret](https://docs.aws.amazon.com/secretsmanager/latest/userguide/integrating_pcs.html) with the prefix `pcs!` in AWS Secrets Manager. The cost of the secret is included in the charge for using AWS PCS. You can rotate cluster secrets through AWS Secrets Manager to maintain security compliance and remediate potential security compromises. @@ -11,5 +11 @@ AWS PCS stores the cluster secret as a [managed secret](https://docs.aws.amazon. -###### Warning - -Don't modify your cluster secret. AWS PCS won't be able to communicate with your cluster if you modify your cluster secret. AWS PCS doesn't support rotation of the cluster secret. You must create a new cluster if you need to modify your cluster secret. - -###### Contents +###### Topics @@ -22,0 +19,2 @@ Don't modify your cluster secret. AWS PCS won't be able to communicate with your + * [Rotating cluster secrets in AWS PCS](./cluster-secret-rotation.html) +