AWS prescriptive-guidance documentation change
Summary
Updated navigation links, reformatted FAQ references, fixed typographical errors, emphasized section headers, and rephrased heading text.
Security assessment
Changes are editorial improvements without addressing vulnerabilities. Updates include link redirects (welcome.html→introduction.html), FAQ reference formatting, apostrophe corrections, and bold formatting for list items. No security vulnerabilities are mentioned or patched.
Diff
diff --git a/prescriptive-guidance/latest/strategy-data-at-rest-encryption/about-data-encryption.md b/prescriptive-guidance/latest/strategy-data-at-rest-encryption/about-data-encryption.md index 998eec1df..f38e04b95 100644 --- a//prescriptive-guidance/latest/strategy-data-at-rest-encryption/about-data-encryption.md +++ b//prescriptive-guidance/latest/strategy-data-at-rest-encryption/about-data-encryption.md @@ -5 +5 @@ -[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Creating an enterprise encryption strategy for data at rest](welcome.html) +[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Creating an enterprise encryption strategy for data at rest](introduction.html) @@ -21 +21 @@ There are two types of algorithms for generating encryption keys, symmetric and -_Symmetric_ encryption uses the same key to encrypt and decrypt the data. This type of encryption is typically faster and is, therefore, efficient for large amounts of data. This type is encryption is widely used and generally accepted to be secure. Because a single key is used for both encryption and decryption, the best practice is to change the key frequently to prevent an unauthorized person from obtaining it. For more information about when symmetric encryption is recommended, see [When do I need symmetric encryption?](./faq.html#faq-symmetric-encryption) in the _FAQ_ section. +_Symmetric_ encryption uses the same key to encrypt and decrypt the data. This type of encryption is typically faster and is, therefore, efficient for large amounts of data. This type is encryption is widely used and generally accepted to be secure. Because a single key is used for both encryption and decryption, the best practice is to change the key frequently to prevent an unauthorized person from obtaining it. For more information about when symmetric encryption is recommended, see _When do I need symmetric encryption?_ in the [FAQ](./faq.html) section. @@ -23 +23 @@ _Symmetric_ encryption uses the same key to encrypt and decrypt the data. This t -_Asymmetric_ encryption uses a pair of keys, a public key for encryption and a private key for decryption. You can share the public key because it isn’t used for decryption, but access to the private key should be highly restricted. Asymmetric encryption is generally regarded to be more secure than symmetric encryption, but it is slower because it uses longer key lengths and requires more complex encryption calculations. For more information about when asymmetric encryption is recommended, see [When do I need asymmetric encryption?](./faq.html#faq-asymmetric-encryption) in the _FAQ_ section. +_Asymmetric_ encryption uses a pair of keys, a public key for encryption and a private key for decryption. You can share the public key because it isn't used for decryption, but access to the private key should be highly restricted. Asymmetric encryption is generally regarded to be more secure than symmetric encryption, but it is slower because it uses longer key lengths and requires more complex encryption calculations. For more information about when asymmetric encryption is recommended, see _When do I need asymmetric encryption?_ in the [FAQ](./faq.html) section. @@ -31 +31 @@ Envelope encryption offers several benefits: - * Convenience – Because your data key is encrypted, you can store it with the encrypted data. + * **Convenience** – Because your data key is encrypted, you can store it with the encrypted data. @@ -33 +33 @@ Envelope encryption offers several benefits: - * Efficiency – Encryption operations can be time consuming, particularly when it’s a large amount of data. Instead of re-encrypting raw data multiple times with different keys, you can re-encrypt only the data keys that protect the raw data. This allows you to provide two or more layers of encryption protection without re-encrypting the data. + * **Efficiency** – Encryption operations can be time consuming, particularly when it's a large amount of data. Instead of re-encrypting raw data multiple times with different keys, you can re-encrypt only the data keys that protect the raw data. This allows you to provide two or more layers of encryption protection without re-encrypting the data. @@ -35 +35 @@ Envelope encryption offers several benefits: - * Performance – You can combine encryption algorithms. For example, you can use symmetric encryption for the raw data but use asymmetric encryption for the data key, which combines the strengths of both encryption algorithms. + * **Performance** – You can combine encryption algorithms. For example, you can use symmetric encryption for the raw data but use asymmetric encryption for the data key, which combines the strengths of both encryption algorithms. @@ -40 +40 @@ Envelope encryption offers several benefits: -For more information about envelope encryption, see [Envelope encryption](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#enveloping) (AWS Key Management Service documentation). For more information about deciding if you need envelope encryption, see [When do I need envelope encryption?](./faq.html#faq-envelope-encryption) in the _FAQ_ section. +For more information about envelope encryption, see [Envelope encryption](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#enveloping) (AWS Key Management Service documentation). For more information about deciding if you need envelope encryption, see _When do I need to implement or support envelope encryption?_ in the [FAQ](./faq.html) section. @@ -50 +50 @@ Introduction -Encryption strategy phases +Phases of building an encryption strategy