AWS prescriptive-guidance documentation change
Summary
Updated breadcrumb link, simplified section title, clarified Secrets Manager usage, updated image path, fixed capitalization in deployment guide reference, and modified next-page link text
Security assessment
Changes are editorial and navigational improvements. The clarification about Secrets Manager ('AWS Secrets Manager') adds specificity but doesn't introduce new security concepts. Image path update doesn't alter security content.
Diff
diff --git a/prescriptive-guidance/latest/addf-security-and-operations/built-in-security-features.md b/prescriptive-guidance/latest/addf-security-and-operations/built-in-security-features.md index 33d9f7a2f..96a38711d 100644 --- a//prescriptive-guidance/latest/addf-security-and-operations/built-in-security-features.md +++ b//prescriptive-guidance/latest/addf-security-and-operations/built-in-security-features.md @@ -5 +5 @@ -[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Autonomous Driving Data Framework (ADDF) security and operations guide](welcome.html) +[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Autonomous Driving Data Framework (ADDF) security and operations guide](introduction.html) @@ -9 +9 @@ Least privilege for ADDF module codeInfrastructure as codeAutomated security che -# ADDF built-in security features +# Built-in security features @@ -100 +100 @@ ADDF handles various secrets for different services, such as Docker Hub, Jupyter -Secrets Manager secrets are stored only in the target accounts, as needed for that account to function properly. By default, the toolchain account doesn't contain any secrets. +AWS Secrets Manager secrets are stored only in the target accounts, as needed for that account to function properly. By default, the toolchain account doesn't contain any secrets. @@ -150 +150 @@ The following figure shows the cross-account relationships, including operations - + @@ -161 +161 @@ These cross-account actions are achieved by using well-defined assume-role opera -These ADDF-specific IAM roles are created as part of the ADDF-bootstrapping process. For more information, see _Bootstrap AWS account(s)_ in the [ADDF Deployment Guide](https://github.com/awslabs/autonomous-driving-data-framework/blob/main/docs/deployment_guide.md) (GitHub). +These ADDF-specific IAM roles are created as part of the ADDF-bootstrapping process. For more information, see _Bootstrap AWS Account(s)_ in the [ADDF Deployment Guide](https://github.com/awslabs/autonomous-driving-data-framework/blob/main/docs/deployment_guide.md) (GitHub). @@ -173 +173 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Security review process +ADDF security review process