AWS managedservices documentation change
Summary
Updated terminology from 'AWS CloudFormation' to 'CloudFormation' in the context of Lambda rotation setup restrictions
Security assessment
The change is a minor terminology adjustment without altering security implications. The existing security context about restricted permissions for Lambda creation remains unchanged.
Diff
diff --git a/managedservices/latest/onboardingguide/secrets-manager.md b/managedservices/latest/onboardingguide/secrets-manager.md index d46153ca0..71bc27bfc 100644 --- a//managedservices/latest/onboardingguide/secrets-manager.md +++ b//managedservices/latest/onboardingguide/secrets-manager.md @@ -23 +23 @@ Request access to Secrets Manager by submitting an RFC with the Management | AWS -Full functionality of AWS Secrets Manager is available in your AMS account, along with automatic rotation functionality of secrets. However, note that setting up your rotation using 'Create a new Lambda function to perform rotation' is not supported because it requires elevated permissions to create the AWS CloudFormation stack (IAM Role and Lambda function creation), which bypasses the Change Management process. AMS Advanced only supports 'Use an existing Lambda function to perform rotation' where you manage your Lambda functions to rotate secrets using the AWS Lambda SSPS Admin role. AMS Advanced doesn't create or manage Lambda to rotate the secrets. +Full functionality of AWS Secrets Manager is available in your AMS account, along with automatic rotation functionality of secrets. However, note that setting up your rotation using 'Create a new Lambda function to perform rotation' is not supported because it requires elevated permissions to create the CloudFormation stack (IAM Role and Lambda function creation), which bypasses the Change Management process. AMS Advanced only supports 'Use an existing Lambda function to perform rotation' where you manage your Lambda functions to rotate secrets using the AWS Lambda SSPS Admin role. AMS Advanced doesn't create or manage Lambda to rotate the secrets.