AWS datasync documentation change

Service: datasync · 2026-03-19 · Documentation low

File: datasync/latest/userguide/API_DescribeLocationFsxWindows.md

Summary

Added documentation for CmkSecretConfig, CustomSecretConfig, and ManagedSecretConfig parameters

Security assessment

Documents new secret management configurations including customer-managed KMS keys and IAM roles. Enhances security documentation but doesn't address a specific vulnerability.

Diff

diff --git a/datasync/latest/userguide/API_DescribeLocationFsxWindows.md b/datasync/latest/userguide/API_DescribeLocationFsxWindows.md
index e77cdcc0c..d0050e27b 100644
--- a//datasync/latest/userguide/API_DescribeLocationFsxWindows.md
+++ b//datasync/latest/userguide/API_DescribeLocationFsxWindows.md
@@ -40,0 +41,4 @@ Required: Yes
+       "CmkSecretConfig": { 
+          "[KmsKeyArn](./API_CmkSecretConfig.html#DataSync-Type-CmkSecretConfig-KmsKeyArn)": "**_string_** ",
+          "[SecretArn](./API_CmkSecretConfig.html#DataSync-Type-CmkSecretConfig-SecretArn)": "**_string_** "
+       },
@@ -41,0 +46,4 @@ Required: Yes
+       "CustomSecretConfig": { 
+          "[SecretAccessRoleArn](./API_CustomSecretConfig.html#DataSync-Type-CustomSecretConfig-SecretAccessRoleArn)": "**_string_** ",
+          "[SecretArn](./API_CustomSecretConfig.html#DataSync-Type-CustomSecretConfig-SecretArn)": "**_string_** "
+       },
@@ -44,0 +53,3 @@ Required: Yes
+       "ManagedSecretConfig": { 
+          "[SecretArn](./API_ManagedSecretConfig.html#DataSync-Type-ManagedSecretConfig-SecretArn)": "**_string_** "
+       },
@@ -54,0 +66,7 @@ The following data is returned in JSON format by the service.
+**CmkSecretConfig **
+    
+
+Describes configuration information for a DataSync-managed secret, such as a `Password` that DataSync uses to access a specific storage location, with a customer-managed AWS KMS key.
+
+Type: [CmkSecretConfig](./API_CmkSecretConfig.html) object
+
@@ -61,0 +80,7 @@ Type: Timestamp
+**CustomSecretConfig **
+    
+
+Describes configuration information for a customer-managed secret, such as a `Password` that DataSync uses to access a specific storage location, with a customer-managed AWS Identity and Access Management (IAM) role that provides access to the secret.
+
+Type: [CustomSecretConfig](./API_CustomSecretConfig.html) object
+
@@ -94,0 +120,7 @@ Pattern: `^(efs|nfs|s3|smb|hdfs|fsx[a-z0-9-]+)://[a-zA-Z0-9.:/\-]+$`
+**ManagedSecretConfig **
+    
+
+Describes configuration information for a DataSync-managed secret, such as a `Password` that DataSync uses to access a specific storage location. DataSync uses the default AWS-managed KMS key to encrypt this secret in AWS Secrets Manager.
+
+Type: [ManagedSecretConfig](./API_ManagedSecretConfig.html) object
+