AWS healthlake medium security documentation change
Summary
Added note that identity provider configuration (including token validation and authorization) can be updated post-creation.
Security assessment
Explicitly documents security-critical updates like token validation Lambda rotation and authorization strategy changes, which are essential for maintaining authentication/authorization security.
Diff
diff --git a/healthlake/latest/devguide/reference-smart-on-fhir-getting-started.md b/healthlake/latest/devguide/reference-smart-on-fhir-getting-started.md index 120122aa6..f7e0c014b 100644 --- a//healthlake/latest/devguide/reference-smart-on-fhir-getting-started.md +++ b//healthlake/latest/devguide/reference-smart-on-fhir-getting-started.md @@ -58,0 +59,4 @@ To create a SMART on FHIR HealthLake data store you need to provide an `Identity +###### Note + +After the data store is created, you can update the identity provider configuration—for example, to rotate the token validation Lambda function, change the authorization server metadata, or change the authorization strategy—by using `UpdateFHIRDatastore`. For more information, see [Updating a HealthLake data store](./managing-data-stores-update.html). +