AWS systems-manager documentation change
Summary
Updated recommendation for secrets management: Replaced note about password rotation with guidance to use Secrets Manager for credentials requiring automatic rotation, cross-account access, or audit logging.
Security assessment
The change enhances security documentation by explicitly recommending Secrets Manager for security-sensitive credentials management, but doesn't indicate a specific security vulnerability being fixed.
Diff
diff --git a/systems-manager/latest/userguide/parameter-store-policies.md b/systems-manager/latest/userguide/parameter-store-policies.md index 6600a0cb4..5793eaf18 100644 --- a//systems-manager/latest/userguide/parameter-store-policies.md +++ b//systems-manager/latest/userguide/parameter-store-policies.md @@ -13,3 +13 @@ Parameter policies help you manage a growing set of parameters by allowing you t -###### Note - -To implement password rotation lifecycles, use AWS Secrets Manager. You can rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle using Secrets Manager. For more information, see [What is AWS Secrets Manager?](https://docs.aws.amazon.com//secretsmanager/latest/userguide/intro.html) in the _AWS Secrets Manager User Guide_. +If you manage credentials that require automatic rotation, cross-account access, or fine-grained audit logging, we recommend using [AWS Secrets Manager](https://docs.aws.amazon.com/secretsmanager/latest/userguide/intro.html). Secrets Manager is purpose-built for managing secrets such as database credentials, API keys, and supported third-party software-vended secrets. For more information, see [What is AWS Secrets Manager?](https://docs.aws.amazon.com//secretsmanager/latest/userguide/intro.html) in the _AWS Secrets Manager User Guide_. @@ -21 +19 @@ Parameter Store enforces parameter policies by using asynchronous, periodic scan -Parameter policies are available for parameters that use the advanced parameters tier. For more information, see [Managing parameter tiers](./parameter-store-advanced-parameters.html). +Parameter policies are available for parameters that use the advanced parameters tier. For more information, see [Managing tiers](./parameter-store-advanced-parameters.html).