AWS prescriptive-guidance documentation change
Summary
Enhanced section headings for specificity, changed 'Key rotation for Amazon EBS volumes' to 'Manual key rotation', and formatted subheadings in bold.
Security assessment
Clarification of existing key rotation procedures without addressing vulnerabilities. The 'manual' specification improves accuracy but doesn't indicate security fixes.
Diff
diff --git a/prescriptive-guidance/latest/aws-kms-best-practices/data-protection-key-rotation.md b/prescriptive-guidance/latest/aws-kms-best-practices/data-protection-key-rotation.md index d589e08d3..f7c2db822 100644 --- a//prescriptive-guidance/latest/aws-kms-best-practices/data-protection-key-rotation.md +++ b//prescriptive-guidance/latest/aws-kms-best-practices/data-protection-key-rotation.md @@ -7 +7 @@ -Symmetric key rotationKey rotation for Amazon EBSKey rotation for Amazon RDSKey rotation for Amazon S3Rotating keys with imported material +AWS KMS symmetric key rotationKey rotation for Amazon EBS volumesKey rotation for Amazon RDSKey rotation for Amazon S3 and Same-Region ReplicationRotating KMS keys with imported material @@ -13 +13 @@ We do not recommend AWS Key Management Service (AWS KMS) key rotation unless you -###### This section discusses the following key rotation topics: +**This section discusses the following key rotation topics:** @@ -17 +17 @@ We do not recommend AWS Key Management Service (AWS KMS) key rotation unless you - * Key rotation for Amazon EBS volumes + * Manual key rotation for Amazon EBS volumes @@ -38 +38 @@ You can rotate Amazon Elastic Block Store (Amazon EBS) data keys by using one of -###### To use operating system tools to copy the data from one volume to another +**To use operating system tools to copy the data from one volume to another** @@ -61 +61 @@ You can rotate Amazon Elastic Block Store (Amazon EBS) data keys by using one of -###### To use an Amazon EBS snapshot to copy the data from one volume to another +**To use an Amazon EBS snapshot to copy the data from one volume to another** @@ -92 +92 @@ For some services, such as Amazon Relational Database Service (Amazon RDS), data -###### To rotate a KMS key for an Amazon RDS database +**To rotate a KMS key for an Amazon RDS database**