AWS kms medium security documentation change
Summary
Changed external key store quota from adjustable to non-adjustable and removed support contact instructions
Security assessment
Changing external key store quotas to non-adjustable directly impacts security controls by limiting request rates. This could prevent denial-of-service attacks or abuse. Removing support contact instructions suggests hardening of security boundaries for external key stores.
Diff
diff --git a/kms/latest/developerguide/requests-per-second.md b/kms/latest/developerguide/requests-per-second.md index fdd03a074..97bb8f3b4 100644 --- a//kms/latest/developerguide/requests-per-second.md +++ b//kms/latest/developerguide/requests-per-second.md @@ -272 +272 @@ Custom key store request quota | Default value (requests per second) for each cu -[External key store](./keystore-external.html) request quota | 1800 | Yes +[External key store](./keystore-external.html) request quota | 1800 | No @@ -276 +276 @@ Custom key store request quota | Default value (requests per second) for each cu -AWS KMS custom key store request quotas do not appear in the Service Quotas console. You cannot view or manage these quotas by using Service Quotas API operations. To request a change to your external key store request quota, visit the [AWS Support Center](https://console.aws.amazon.com/support/home) and create a case. +AWS KMS custom key store request quotas do not appear in the Service Quotas console. You cannot view or manage these quotas by using Service Quotas API operations.