AWS storagegateway: Document FIPS-compliant VPC endpoint configuration
Summary
Added instructions for selecting FIPS service names and noted regional availability for FIPS endpoints.
Security assessment
Provides explicit guidance for configuring FIPS-validated endpoints, strengthening encryption standards.
Evidence
For FIPS-compliant endpoints, choose `com.amazonaws.`region`.storagegateway-fips`, for example, `com.amazonaws.us-east-2.storagegateway-fips`.
Diff
diff --git a/storagegateway/latest/tgw/gateway-private-link.md b/storagegateway/latest/tgw/gateway-private-link.md index 897289f1a..c32384bd1 100644 --- a//storagegateway/latest/tgw/gateway-private-link.md +++ b//storagegateway/latest/tgw/gateway-private-link.md @@ -38 +38,5 @@ Follow these instructions to create a VPC endpoint. If you already have a VPC en - 4. For **Service Name** , choose `com.amazonaws.`region`.storagegateway`. For example `com.amazonaws.us-east-2.storagegateway`. + 4. For **Service Name** , choose `com.amazonaws.`region`.storagegateway`. For example `com.amazonaws.us-east-2.storagegateway`. For FIPS-compliant endpoints, choose `com.amazonaws.`region`.storagegateway-fips`, for example, `com.amazonaws.us-east-2.storagegateway-fips`. + +###### Note + +FIPS endpoints are available only in some AWS Regions. For more information, see [Storage Gateway endpoints and quotas](https://docs.aws.amazon.com/general/latest/gr/sg.html) in the _AWS General Reference_. @@ -63,0 +68,2 @@ Follow these instructions to create a VPC endpoint. If you already have a VPC en +If you use a FIPS endpoint in a Region with FIPS availability, your DNS name looks similar to this example: `vpce-1234567e1c24a1fe9-62qntt8k.storagegateway-fips.us-east-1.vpce.amazonaws.com ` +