AWS emr: Add FIPS 140-2/140-3 compliance section for EMR on EKS
Summary
Updates the FIPS reference from 140-2 to 140-3 and adds a new section stating that Amazon EMR on EKS runtime images do not operate in FIPS mode and no FIPS-enabled image variant is available.
Security assessment
The change documents cryptographic-module (FIPS) compliance posture and clarifies that EMR on EKS images are not FIPS-enabled, which is security-relevant guidance about encryption standards, but it does not address a specific vulnerability or incident.
Evidence
+The Amazon EMR on EKS runtime images do not operate in FIPS mode, and a FIPS-enabled variant of the image is not available.
Diff
diff --git a/emr/latest/EMR-on-EKS-DevelopmentGuide/data-protection.md b/emr/latest/EMR-on-EKS-DevelopmentGuide/data-protection.md index c2566194d..e7df06c55 100644 --- a//emr/latest/EMR-on-EKS-DevelopmentGuide/data-protection.md +++ b//emr/latest/EMR-on-EKS-DevelopmentGuide/data-protection.md @@ -7 +7 @@ -Encryption at restEncryption in transit +FIPS complianceEncryption at restEncryption in transit @@ -27 +27 @@ For data protection purposes, we recommend that you protect AWS account credenti - * If you require FIPS 140-2 validated cryptographic modules when accessing AWS through a command line interface or an API, use a FIPS endpoint. For more information about the available FIPS endpoints, see [Federal Information Processing Standard (FIPS) 140-2](https://aws.amazon.com/compliance/fips/). + * If you require FIPS 140-3 validated cryptographic modules when accessing AWS through a command line interface or an API, use a FIPS endpoint. For more information about the available FIPS endpoints, see [Federal Information Processing Standard (FIPS) 140-3](https://aws.amazon.com/compliance/fips/). @@ -33,0 +34,4 @@ We strongly recommend that you never put sensitive identifying information, such +## FIPS 140-2/140-3 compliance for the Amazon EMR on EKS runtime image + +The Amazon EMR on EKS runtime images do not operate in FIPS mode, and a FIPS-enabled variant of the image is not available. +