AWS secretsmanager documentation change
Summary
Added documentation for creating partner secrets and adjusted step numbering. Fixed URL formatting in CLI references.
Security assessment
The change introduces documentation for managing external partner secrets, which is a security feature. However, there is no evidence of addressing a specific security vulnerability. The existing warning about tags not being encrypted remains unchanged.
Diff
diff --git a/secretsmanager/latest/userguide/create_secret.md b/secretsmanager/latest/userguide/create_secret.md index 9ebe712fd..a534183d0 100644 --- a//secretsmanager/latest/userguide/create_secret.md +++ b//secretsmanager/latest/userguide/create_secret.md @@ -70,0 +71,2 @@ Enter as plaintext: + * To store a managed external secrets from an Secrets Manager partner, choose **Partner secret**. Then choose the partner and provide the details that identify the secret for the partner. For details, see [Using AWS Secrets Manager managed external secrets to manage Third Party secrets](./managed-external-secrets.html). + @@ -85 +87,3 @@ You must have [Permissions for the KMS key](./security-encryption.html#security- - 2. (Optional) In the **Tags** section, add tags to your secret. For tagging strategies, see [Tagging secrets in AWS Secrets Manager](./managing-secrets_tagging.html). Don't store sensitive information in tags because they aren't encrypted. + 2. (Optional) If you are created an external secret, enter the metadata required by the Secrets Manager partner that holds the secret. + + 3. (Optional) In the **Tags** section, add tags to your secret. For tagging strategies, see [Tagging secrets in AWS Secrets Manager](./managing-secrets_tagging.html). Don't store sensitive information in tags because they aren't encrypted. @@ -87 +91 @@ You must have [Permissions for the KMS key](./security-encryption.html#security- - 3. (Optional) In **Resource permissions** , to add a resource policy to your secret, choose **Edit permissions**. For more information, see [Resource-based policies](./auth-and-access_resource-policies.html). + 4. (Optional) In **Resource permissions** , to add a resource policy to your secret, choose **Edit permissions**. For more information, see [Resource-based policies](./auth-and-access_resource-policies.html). @@ -89 +93 @@ You must have [Permissions for the KMS key](./security-encryption.html#security- - 4. (Optional) In **Replicate secret** , to replicate your secret to another AWS Region, choose **Replicate secret**. You can replicate your secret now or come back and replicate it later. For more information, see [Multi-region replication](./replicate-secrets.html). + 5. (Optional) In **Replicate secret** , to replicate your secret to another AWS Region, choose **Replicate secret**. You can replicate your secret now or come back and replicate it later. For more information, see [Multi-region replication](./replicate-secrets.html). @@ -91 +95 @@ You must have [Permissions for the KMS key](./security-encryption.html#security- - 5. Choose **Next**. + 6. Choose **Next**. @@ -108 +112 @@ When you enter commands in a command shell, there is a risk of the command histo -The following [`create-secret`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/secretsmanager/create-secret.html) example creates a secret from credentials in a file. For more information, see [Loading AWS CLI parameters from a file](https://docs.aws.amazon.com/cli/latest/userguide/cli-usage-parameters-file.html) in the AWS CLI User Guide. +The following [`create-secret`](https://awscli.amazonaws.com/v2/documentation/api/latest/reference/secretsmanager/create-secret.html) example creates a secret from credentials in a file. For more information, see [Loading AWS CLI parameters from a file](https://docs.aws.amazon.com//cli/latest/userguide/cli-usage-parameters-file.html) in the AWS CLI User Guide. @@ -141 +145 @@ The following [`create-secret`](https://awscli.amazonaws.com/v2/documentation/ap -The following [`create-secret`](https://docs.aws.amazon.com/cli/latest/reference/secretsmanager/create-secret.html) example creates a secret with two tags. +The following [`create-secret`](https://docs.aws.amazon.com//cli/latest/reference/secretsmanager/create-secret.html) example creates a secret with two tags.