AWS AWSCloudFormation documentation change
Summary
Added documentation links for using KMS-encrypted service-managed secrets and customer-managed Secrets Manager secrets in DataSync object storage locations
Security assessment
The change adds references to security documentation about credential management with KMS encryption and Secrets Manager, but doesn't indicate a specific security vulnerability was fixed. It enhances security documentation by providing links to detailed guidance on secure credential storage.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-resource-datasync-locationobjectstorage.md b/AWSCloudFormation/latest/TemplateReference/aws-resource-datasync-locationobjectstorage.md index 0491eed1e..e2978adac 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-resource-datasync-locationobjectstorage.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-resource-datasync-locationobjectstorage.md @@ -122 +122 @@ When you include this parameter as part of a `CreateLocationObjectStorage` reque -Make sure that DataSync has permission to access the KMS key that you specify. +Make sure that DataSync has permission to access the KMS key that you specify. For more information, see [ Using a service-managed secret encrypted with a custom AWS KMS key](https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#service-secret-custom-key). @@ -137 +137 @@ _Required_ : No -Specifies configuration information for a customer-managed Secrets Manager secret where the secret key for a specific object storage location is stored in plain text, in Secrets Manager. This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret. +Specifies configuration information for a customer-managed Secrets Manager secret where the secret key for a specific object storage location is stored in plain text, in Secrets Manager. This configuration includes the secret ARN, and the ARN for an IAM role that provides access to the secret. For more information, see [ Using a secret that you manage](https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#custom-secret-custom-key).