AWS comprehend high security documentation change
Summary
Added documentation for FIPS endpoints and regional availability
Security assessment
Documents FIPS-compliant endpoints which meet federal security standards for cryptographic modules. Explicitly adds security feature documentation.
Diff
diff --git a/comprehend/latest/dg/vpc-interface-endpoints.md b/comprehend/latest/dg/vpc-interface-endpoints.md index a328408a0..ec734a4c1 100644 --- a//comprehend/latest/dg/vpc-interface-endpoints.md +++ b//comprehend/latest/dg/vpc-interface-endpoints.md @@ -26,0 +27,6 @@ Amazon Comprehend endpoints are not available in all availability zones in a reg +For FIPS endpoints: + + + aws ec2 describe-vpc-endpoint-services \ + --service-names com.amazonaws.us-west-2.comprehend-fips + @@ -36,0 +43,4 @@ Create a VPC endpoint for Amazon Comprehend using the following service name: + * com.amazonaws.`region`.comprehend-fips + + + @@ -37,0 +48 @@ Create a VPC endpoint for Amazon Comprehend using the following service name: +If you enable private DNS for the endpoint, you can make API requests to Amazon Comprehend using its default DNS name for the Region, for example, `_comprehend.us-east-1.amazonaws.com_`, or `_comprehend-fips.us-east-1.amazonaws.com_` for FIPS. @@ -38,0 +50 @@ Create a VPC endpoint for Amazon Comprehend using the following service name: +###### Note @@ -40 +52 @@ Create a VPC endpoint for Amazon Comprehend using the following service name: -If you enable private DNS for the endpoint, you can make API requests to Amazon Comprehend using its default DNS name for the Region, for example, `_comprehend.us-east-1.amazonaws.com_`. +The FIPS endpoint service (`comprehend-fips`) is available in us-east-1, us-east-2, us-west-2, ca-central-1, us-gov-west-1, and us-iso-east-1.