AWS datasync documentation change
Summary
Added CmkSecretConfig and CustomSecretConfig parameters to support secret management configurations.
Security assessment
Documents how to use KMS and customer-managed secrets for FSx Windows credentials, expanding security documentation without evidence of a specific vulnerability fix.
Diff
diff --git a/datasync/latest/userguide/API_UpdateLocationFsxWindows.md b/datasync/latest/userguide/API_UpdateLocationFsxWindows.md index 517fe9538..30f792883 100644 --- a//datasync/latest/userguide/API_UpdateLocationFsxWindows.md +++ b//datasync/latest/userguide/API_UpdateLocationFsxWindows.md @@ -16,0 +17,8 @@ For more information, see [Configuring DataSync transfers with FSx for Windows F + "CmkSecretConfig": { + "[KmsKeyArn](./API_CmkSecretConfig.html#DataSync-Type-CmkSecretConfig-KmsKeyArn)": "string", + "[SecretArn](./API_CmkSecretConfig.html#DataSync-Type-CmkSecretConfig-SecretArn)": "string" + }, + "CustomSecretConfig": { + "[SecretAccessRoleArn](./API_CustomSecretConfig.html#DataSync-Type-CustomSecretConfig-SecretAccessRoleArn)": "string", + "[SecretArn](./API_CustomSecretConfig.html#DataSync-Type-CustomSecretConfig-SecretArn)": "string" + }, @@ -29,0 +38,18 @@ The request accepts the following data in JSON format. +**CmkSecretConfig ** + + +Specifies configuration information for a DataSync-managed secret, such as a `Password` or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key. + +Type: [CmkSecretConfig](./API_CmkSecretConfig.html) object + +Required: No + +**CustomSecretConfig ** + + +Specifies configuration information for a customer-managed secret, such as a `Password` or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS Identity and Access Management (IAM) role that provides access to the secret. + +Type: [CustomSecretConfig](./API_CustomSecretConfig.html) object + +Required: No +