AWS security-lake: Fixed KMS documentation URL formatting
Summary
Corrected a broken hyperlink to KMS key policy modification guide by removing extra double slash.
Security assessment
The change only fixes a URL syntax error without altering security guidance or addressing vulnerabilities.
Evidence
+If you want to use an existing KMS key to encrypt Security Lake data, you must modify the key policy for the KMS key. The key policy must allow the IAM role associated with the Lake Formation data lake location to use the KMS key to decrypt the data. For instructions on how you can change the key policy for a KMS key, see [Changing a key policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-modifying.html) in the AWS Key Management Service Developer Guide.
Diff
diff --git a/security-lake/latest/userguide/data-protection.md b/security-lake/latest/userguide/data-protection.md index 77cf4d1f8..03d99d89d 100644 --- a//security-lake/latest/userguide/data-protection.md +++ b//security-lake/latest/userguide/data-protection.md @@ -59 +59 @@ Security Lake doesn't need `Decrypt` permissions. When authorized users of the k -If you want to use an existing KMS key to encrypt Security Lake data, you must modify the key policy for the KMS key. The key policy must allow the IAM role associated with the Lake Formation data lake location to use the KMS key to decrypt the data. For instructions on how you can change the key policy for a KMS key, see [Changing a key policy](https://docs.aws.amazon.com//kms/latest/developerguide/key-policy-modifying.html) in the AWS Key Management Service Developer Guide. +If you want to use an existing KMS key to encrypt Security Lake data, you must modify the key policy for the KMS key. The key policy must allow the IAM role associated with the Lake Formation data lake location to use the KMS key to decrypt the data. For instructions on how you can change the key policy for a KMS key, see [Changing a key policy](https://docs.aws.amazon.com/kms/latest/developerguide/key-policy-modifying.html) in the AWS Key Management Service Developer Guide.