AWS prescriptive-guidance documentation change
Summary
Updated navigation link, simplified section title from 'Encryption framework' to 'Framework', fixed apostrophe formatting, and added bold formatting to process names.
Security assessment
Changes are cosmetic/structural (formatting, title shortening) without modifying security content. No evidence of vulnerability fixes or new security guidance; maintains existing encryption strategy documentation.
Diff
diff --git a/prescriptive-guidance/latest/strategy-data-at-rest-encryption/framework.md b/prescriptive-guidance/latest/strategy-data-at-rest-encryption/framework.md index e6de70064..b5b88de0b 100644 --- a//prescriptive-guidance/latest/strategy-data-at-rest-encryption/framework.md +++ b//prescriptive-guidance/latest/strategy-data-at-rest-encryption/framework.md @@ -5 +5 @@ -[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Creating an enterprise encryption strategy for data at rest](welcome.html) +[Documentation](/index.html)[AWS Prescriptive Guidance](https://aws.amazon.com/prescriptive-guidance/)[Creating an enterprise encryption strategy for data at rest](introduction.html) @@ -9 +9 @@ Data classificationEnvironment classificationChange events and processes -# Encryption framework +# Framework @@ -32 +32 @@ Your encryption framework should include the following information about data cl - * The classification criteria used to classify data into its appropriate category. For example, a company’s trade recipe could be classified as _restricted_ , employee PII could be _confidential_ , and internal communication between employees through official channels might be _internal_. + * The classification criteria used to classify data into its appropriate category. For example, a company's trade recipe could be classified as _restricted_ , employee PII could be _confidential_ , and internal communication between employees through official channels might be _internal_. @@ -79 +79 @@ Your encryption framework should include the following to help prepare your orga - * Change control process – The purpose of this process is to plan and prepare for the upcoming change. When you need to change your encryption standards or policy, this repeatable and scalable process is designed to define: + * **Change control process** – The purpose of this process is to plan and prepare for the upcoming change. When you need to change your encryption standards or policy, this repeatable and scalable process is designed to define: @@ -91 +91 @@ Your encryption framework should include the following to help prepare your orga - * Change auditability and traceability process – This process defines how your organization audits and traces changes, both at the metadata level and at the data level. It should define how you keep and access records of: + * **Change auditability and traceability process** – This process defines how your organization audits and traces changes, both at the metadata level and at the data level. It should define how you keep and access records of: @@ -101 +101 @@ For example, if your organization changes the minimum encryption key strength, y - * Change rollout process – The purpose of this process is to define how your organization implements the change after you have decided to make it. This process defines: + * **Change rollout process** – The purpose of this process is to define how your organization implements the change after you have decided to make it. This process defines: @@ -115 +115 @@ For example, if your organization changes the minimum encryption key strength, y - * Retirement process – The purpose of this process is to define how your organization handles retirement of encryption-related resources and information. It includes instructions for the actual retirement as well as the communication process for retirement. + * **Retirement process** – The purpose of this process is to define how your organization handles retirement of encryption-related resources and information. It includes instructions for the actual retirement as well as the communication process for retirement.