AWS AWSCloudFormation documentation change
Summary
Added CmkSecretConfig and CustomSecretConfig properties for managing secrets with KMS/Secrets Manager in DataSync FSx Windows locations
Security assessment
Documents new security-related configuration options for secrets management. Introduces secure credential handling methods but does not address a specific vulnerability.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-datasync-locationfsxwindows.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-datasync-locationfsxwindows.md index f4b7f3d1e..79c56cefc 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-datasync-locationfsxwindows.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-datasync-locationfsxwindows.md @@ -20,0 +21,2 @@ To declare this entity in your CloudFormation template, use the following syntax + "CmkSecretConfig" : [CmkSecretConfig](./aws-properties-datasync-locationfsxwindows-cmksecretconfig.html), + "CustomSecretConfig" : [CustomSecretConfig](./aws-properties-datasync-locationfsxwindows-customsecretconfig.html), @@ -36,0 +39,4 @@ To declare this entity in your CloudFormation template, use the following syntax + CmkSecretConfig: + [CmkSecretConfig](./aws-properties-datasync-locationfsxwindows-cmksecretconfig.html) + CustomSecretConfig: + [CustomSecretConfig](./aws-properties-datasync-locationfsxwindows-customsecretconfig.html) @@ -49,0 +56,30 @@ To declare this entity in your CloudFormation template, use the following syntax +`CmkSecretConfig` + + +Specifies configuration information for a DataSync-managed secret, such as an authentication token, secret key, password, or Kerberos keytab that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key. + +###### Note + +You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request. + +_Required_ : No + + _Type_ : [CmkSecretConfig](./aws-properties-datasync-locationfsxwindows-cmksecretconfig.html) + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) + +`CustomSecretConfig` + + +Specifies configuration information for a customer-managed Secrets Manager secret where a storage location credentials is stored in Secrets Manager as plain text (for authentication token, secret key, or password) or as binary (for Kerberos keytab). This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret. + +###### Note + +You can use either `CmkSecretConfig` or `CustomSecretConfig` to provide credentials for a `CreateLocation` request. Do not provide both parameters for the same request. + +_Required_ : No + + _Type_ : [CustomSecretConfig](./aws-properties-datasync-locationfsxwindows-customsecretconfig.html) + + _Update requires_ : [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) + @@ -176,0 +213,5 @@ For more information about using the `Fn::GetAtt` intrinsic function, see [Fn::G +`CmkSecretConfig.SecretArn` + + +Property description not available. + @@ -242 +283 @@ Tag -Tag +CmkSecretConfig