AWS resilience-hub: Rename 'assumption' to 'assertion' in CMK encryption docs
Summary
Terminology update replacing 'assumption' with 'assertion' across the customer managed key encryption documentation, including data type tables, Encrypt permission descriptions, and encryption context keys.
Security assessment
The change only renames a data type term within existing encryption-at-rest documentation; no new security control, permission, or vulnerability fix is introduced.
Evidence
+`assertion` Assertion text (AI-generated and user-created). | Enabled | Enabled
Diff
diff --git a/resilience-hub/latest/userguide/encryption-at-rest-cmk.md b/resilience-hub/latest/userguide/encryption-at-rest-cmk.md index 94b4c27eb..6459f71a6 100644 --- a//resilience-hub/latest/userguide/encryption-at-rest-cmk.md +++ b//resilience-hub/latest/userguide/encryption-at-rest-cmk.md @@ -49 +49 @@ Encryption of data types in Next generation Resilience Hub Data type | AWS owned -`assumption` Assumption text associated with service functions. | Enabled | Enabled +`assertion` Assertion text (AI-generated and user-created). | Enabled | Enabled @@ -69 +69 @@ When you create a service with a customer managed key, Next generation Resilienc - * `Encrypt` – Encrypt sensitive fields such as findings, recommendations, and assumptions generated during assessment workflows. + * `Encrypt` – Encrypt sensitive fields such as findings, recommendations, and assertions generated during assessment workflows. @@ -228 +228 @@ The policy statements provide the following permissions: - * **AllowResilienceHubEncryptDecryptForServices** – Allows Next generation Resilience Hub to encrypt and decrypt service-level data (findings, recommendations, assumptions, service functions, events, and assessment data) during synchronous API calls. Scoped to your service resources by encryption context. + * **AllowResilienceHubEncryptDecryptForServices** – Allows Next generation Resilience Hub to encrypt and decrypt service-level data (findings, recommendations, assertions, service functions, events, and assessment data) during synchronous API calls. Scoped to your service resources by encryption context. @@ -255 +255 @@ Encryption context keys Encryption context key | Scope | Used for -`aws:resiliencehub:service-arn` | Service | Findings, recommendations, assumptions, service functions, dependencies, events, and assessment data +`aws:resiliencehub:service-arn` | Service | Findings, recommendations, assertions, service functions, dependencies, events, and assessment data