AWS whitepapers documentation change
Summary
Shortened 'Elastic Load Balancing' to 'ELB' in reference documentation
Security assessment
Abbreviation change without modifying security controls around KMS or IAM sessions
Diff
diff --git a/whitepapers/latest/security-design-of-aws-nitro-system/putting-the-pieces-together-ebs-volume-attachment.md b/whitepapers/latest/security-design-of-aws-nitro-system/putting-the-pieces-together-ebs-volume-attachment.md index 053e50a82..3bfdfa83e 100644 --- a//whitepapers/latest/security-design-of-aws-nitro-system/putting-the-pieces-together-ebs-volume-attachment.md +++ b//whitepapers/latest/security-design-of-aws-nitro-system/putting-the-pieces-together-ebs-volume-attachment.md @@ -13 +13 @@ The EC2 control plane allocates the PCIe device resources of the Nitro Card for -Assuming that the customer IAM identity that made the `AttachVolume` command is also authorized to make a Decrypt command in AWS KMS under the expected AWS KMS key, the encrypted volume’s data key will be decrypted. The Nitro System's access to this operation is protected by [AWS KMS Grants](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html) and by IAM Forward Access Sessions. (Refer to this [explanation of IAM Forward Access Sessions](https://youtu.be/2ZeUBbZPUWs?t=1919) in the context of Elastic Load Balancing, AWS Certificate Manager and AWS Key Management Service in a presentation by Colm MacCárthaigh, VP and Distinguished Engineer at AWS.) +Assuming that the customer IAM identity that made the `AttachVolume` command is also authorized to make a Decrypt command in AWS KMS under the expected AWS KMS key, the encrypted volume’s data key will be decrypted. The Nitro System's access to this operation is protected by [AWS KMS Grants](https://docs.aws.amazon.com/kms/latest/developerguide/grants.html) and by IAM Forward Access Sessions. (Refer to this [explanation of IAM Forward Access Sessions](https://youtu.be/2ZeUBbZPUWs?t=1919) in the context of ELB, AWS Certificate Manager and AWS Key Management Service in a presentation by Colm MacCárthaigh, VP and Distinguished Engineer at AWS.)