AWS datasync documentation change
Summary
Updated CustomSecretConfig description to specify IAM role instead of KMS key for secret access
Security assessment
Similar to the ObjectStorage change, this updates documentation to clarify IAM role usage for secret access in SMB locations. This is a documentation correction about security feature implementation with no evidence of a security issue.
Diff
diff --git a/datasync/latest/userguide/API_UpdateLocationSmb.md b/datasync/latest/userguide/API_UpdateLocationSmb.md index 85ddbe950..e56b66622 100644 --- a//datasync/latest/userguide/API_UpdateLocationSmb.md +++ b//datasync/latest/userguide/API_UpdateLocationSmb.md @@ -88 +88 @@ Required: No -Specifies configuration information for a customer-managed secret, such as a `Password` or `KerberosKeytab` or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key. +Specifies configuration information for a customer-managed secret, such as a `Password` or `KerberosKeytab` or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS Identity and Access Management (IAM) role that provides access to the secret.