AWS healthlake medium security documentation change
Summary
Added note that authentication metadata (including authorization endpoints) can be updated post-creation.
Security assessment
Documents ability to update critical authentication endpoints, which relates to security maintenance (e.g., rotating endpoints after compromise). This is a security feature allowing credential management.
Diff
diff --git a/healthlake/latest/devguide/reference-smart-on-fhir-authentication.md b/healthlake/latest/devguide/reference-smart-on-fhir-authentication.md index b3793e177..c9fdea37e 100644 --- a//healthlake/latest/devguide/reference-smart-on-fhir-authentication.md +++ b//healthlake/latest/devguide/reference-smart-on-fhir-authentication.md @@ -14,0 +15,2 @@ When you create a SMART on FHIR HealthLake data store, you must define the autho +You can also update the `metadata` element (including the authorization and token endpoints) on an existing data store by using `UpdateFHIRDatastore`. For more information, see [Updating a HealthLake data store](./managing-data-stores-update.html). +