AWS AWSCloudFormation documentation change
Summary
Specified IAM role and secret ARN requirements for Secrets Manager transit encryption
Security assessment
Adds documentation about access control requirements for encryption secrets without evidence of vulnerability remediation. Improves security documentation by detailing secret management.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-mediaconnect-flow-secretsmanagerencryptionkeyconfiguration.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-mediaconnect-flow-secretsmanagerencryptionkeyconfiguration.md index 24300bc92..f221b46df 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-mediaconnect-flow-secretsmanagerencryptionkeyconfiguration.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-mediaconnect-flow-secretsmanagerencryptionkeyconfiguration.md @@ -9 +9 @@ This is the new _CloudFormation Template Reference Guide_. Please update your bo -The `SecretsManagerEncryptionKeyConfiguration` property type specifies Property description not available. for an [AWS::MediaConnect::Flow](./aws-resource-mediaconnect-flow.html). +The configuration settings for transit encryption using AWS Secrets Manager, including the secret ARN and role ARN. @@ -36 +36 @@ To declare this entity in your CloudFormation template, use the following syntax -Property description not available. +The ARN of the IAM role assumed by MediaConnect to access the AWS Secrets Manager secret. @@ -49 +49 @@ _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormat -Property description not available. +The ARN of the AWS Secrets Manager secret used for transit encryption.